Security & compliance

Built to pass your security review

How we protect your data: our security controls, compliance status, and the vendors we rely on. Start your security review here.

Open the Trust Center Request documentation

GDPR · DPA on request
CCPA · service provider
AES-256 at rest · TLS in transit

Overview

Protecting business contact data is core to the work

CAM helps B2B teams see which prospects their competitors' sales reps are connecting with. Protecting the business contact data we process for our customers is core to that work.

This page summarises our security posture. The full Trust Center covers every control; you can also request our DPA and security documentation for your vendor review.

Controls

Where CAM runs and how the platform is protected

Managed cloud infrastructure CAM runs on Google Cloud, with a managed Postgres database (Neon) and AWS S3 for file storage.
Encryption in transit All traffic is served over TLS. HSTS is enforced in production.
Encryption at rest Database and file storage are encrypted at rest (AES-256) by our infrastructure providers.
Point-in-time database recovery Our database provider keeps continuous backups with point-in-time restore.
Health monitoring Health checks, memory watchdogs and automated failure alerts for background jobs.
No LinkedIn login required CAM never asks for your LinkedIn login. We hold no LinkedIn credentials, cookies, or sessions of yours. Engagement and profile data is retrieved through third-party data providers.

Control areas

Five areas, documented in the Trust Center

Infrastructure security: Where CAM runs and how the platform is protected.
Product security: Authentication, access and workspace isolation.
Data security: Encryption, backups and retention.
Application security: How the application is built and reviewed.
Data privacy: What we process, why, and how to exercise your rights.

Compliance

GDPR and CCPA

GDPRData Processing Agreement (DPA) with Standard Contractual Clauses available on request.
CCPAWe act as a service provider and process personal information only to deliver the service.

Infrastructure & subprocessors

Where CAM runs

Google CloudApplication hosting
NeonPostgres database
AWSFile storage (S3)

Our subprocessor list is shared with customers and prospective customers on request.

Resources

Shared after a quick review

Request any of these for your vendor review and we'll send them over.

Data Processing Agreement (DPA)

GDPR / CCPA terms for processing customer personal data.

Request access

Security Overview

Architecture, controls and policies in detail.

Request access

Subprocessor list

List of vendors that process customer data.

Request access

Security questionnaire

Completed standard security questionnaire (e.g. CAIQ-lite / SIG-lite).

Request access

FAQ

Frequently asked questions

What data does CAM process?

Business contact and engagement data about the prospects your tracked competitors interact with, retrieved through third-party data providers, plus the account details of your own users. What we collect, why we collect it, and how to exercise your rights over it are set out in our privacy policy.

Where is customer data stored?

CAM runs on Google Cloud, with a managed Postgres database (Neon) and AWS S3 for file storage. Database and file storage are encrypted at rest by our infrastructure providers.

Which subprocessors do you use?

Google Cloud (application hosting), Neon (Postgres database) and AWS (file storage). The full subprocessor list is shared on request.

Do you hold our LinkedIn credentials?

No. CAM never asks for your LinkedIn login. We hold no LinkedIn credentials, cookies, or sessions of yours.

How do I report a security vulnerability?

Email [email protected] with the details, or use the “Report a vulnerability” link in the Trust Center.

Start your security review.

Open the Trust Center for every control, or request our DPA and security documentation for your vendor review.

Open the Trust Center Request documentation