How we protect your data

  • Partners see only what you shareInvite a partner as a collaborator on a GTM motion, campaign or event, and they see only what you share with them. Nothing else in your workspace.
  • Target lists without data exposureLists are built from your data and your partners' without exposing raw data to either side.
  • A person approves what goes outAI drafts. People approve, in batches if they want. Nothing is sent on your behalf unchecked.
  • AI agents can't sendAgents work through our MCP to draft, plan and analyze. Sending messages and starting campaigns is blocked for agents by design.
  • Single sign-onSAML 2.0 and OIDC with Okta, Auth0 and other identity providers. Verify your domains, require SSO for every member and set session length.
  • Scoped, role-based accessAPI keys and connected apps get only the permissions you grant. Users see their own calls and calendar. AI tools archive records, never permanently delete them.
  • Your AI or oursRun our agents in your own AI account, so your data stays inside your environment. Or use ours.
  • Your skills stay yoursWhat our agents learn about your business is stored only in your profile, never shared across customers.
  • Deleted when you leaveCustomer data is deleted 30 days after the relationship ends.
  • EU data handled properlyEU transfers rely on Standard Contractual Clauses.

Controls behind it

A sample of the controls in our SOC 2 Type II program. The full list, policies and report are in our Trust Center.

Data protection

  • Encryption in transit and at rest
  • Production key management
  • Data retention and deletion policy
  • Environment and tenant segmentation

Access

  • Multi-factor authentication
  • Least-privilege production access
  • Quarterly access reviews
  • Access revoked at termination

Infrastructure

  • Multi-availability-zone deployment
  • Database backups and disaster recovery
  • Web application firewall
  • Intrusion detection

Monitoring and response

  • Centralized logging and monitoring
  • Security incident logging and response
  • Vulnerability scanning and patching
  • Penetration testing

People

  • Background checks
  • Confidentiality agreements
  • Security awareness training
  • Code of conduct

Governance

  • Board security briefings
  • Annual risk assessment
  • Vendor management program
  • Cybersecurity insurance