Security
Built with your security in mind.
We run outreach, read partner conversations and connect to your CRM, so protecting your data comes first. We hold ourselves to the controls your security team expects, and we're happy to show you how.
SOC 2
SOC 2 Type II compliantIndependently attested. Report available on request.
How we protect your data
- Partners see only what you shareInvite a partner as a collaborator on a GTM motion, campaign or event, and they see only what you share with them. Nothing else in your workspace.
- Target lists without data exposureLists are built from your data and your partners' without exposing raw data to either side.
- A person approves what goes outAI drafts. People approve, in batches if they want. Nothing is sent on your behalf unchecked.
- AI agents can't sendAgents work through our MCP to draft, plan and analyze. Sending messages and starting campaigns is blocked for agents by design.
- Single sign-onSAML 2.0 and OIDC with Okta, Auth0 and other identity providers. Verify your domains, require SSO for every member and set session length.
- Scoped, role-based accessAPI keys and connected apps get only the permissions you grant. Users see their own calls and calendar. AI tools archive records, never permanently delete them.
- Where we connect, only if you want us toRun us fully siloed and plug into our data through MCP. Or connect us to your CRM, email, calendar, call recordings or sending domain, and we'll pass your security review.
- Your AI or oursRun our agents in your own AI account, so your data stays inside your environment. Or use ours.
- Your skills stay yoursWhat our agents learn about your business is stored only in your profile, never shared across customers.
- Deleted when you leaveCustomer data is deleted 30 days after the relationship ends.
- EU data handled properlyEU transfers rely on Standard Contractual Clauses.
Controls behind it
A sample of the controls in our SOC 2 Type II program. The full list, policies and report are in our Trust Center.
Data protection
- Encryption in transit and at rest
- Production key management
- Data retention and deletion policy
- Environment and tenant segmentation
Access
- Multi-factor authentication
- Least-privilege production access
- Quarterly access reviews
- Access revoked at termination
Infrastructure
- Multi-availability-zone deployment
- Database backups and disaster recovery
- Web application firewall
- Intrusion detection
Monitoring and response
- Centralized logging and monitoring
- Security incident logging and response
- Vulnerability scanning and patching
- Penetration testing
People
- Background checks
- Confidentiality agreements
- Security awareness training
- Code of conduct
Governance
- Board security briefings
- Annual risk assessment
- Vendor management program
- Cybersecurity insurance
Questions about security?
Get our SOC 2 Type II report and policies from the Trust Center, or start with a Program-Fit Analysis and bring your security team along.
- A feel for which programs fit
- What needs to be workshopped, and who should be involved, before it goes live
- Whether your partners could fund it, and which ones
With a senior partnerships leader, not an SDR. If nothing fits, we'll tell you.
Solutions Partner of the YearSOC 2 Type II compliantBuilt with your security in mind. How we protect your data or visit our Trust Center
Nine yearsRunning partner programs of all types, including distributors, resellers, MSPs, VARs, SIs, GSIs and hyperscalers