Security and data protection
The short version for your IT department. The long version, with documents, is one email away.
Request the security packData residency
Production data is stored and processed in EU data centers (Google Cloud, europe-west1). Backups stay in the EU.
GDPR
Swopi s.r.o. is a Czech company. We act as processor for your leads and cards. A data processing agreement with a subprocessor list is available on request.
Authentication
Email, Google and Microsoft sign-in. Single sign-on with Microsoft Entra ID for organizations, enforceable for all members. Dashboard sessions use secure HTTP-only cookies and can be revoked at any time.
Provisioning
SCIM 2.0 creates and removes users and cards automatically from your identity provider. Roles: owner, admin, member.
Encryption
TLS 1.2 or newer in transit. Encryption at rest on Google Cloud. Secrets are stored in managed vaults, never in code.
AI processing
Enrichment and follow-up drafts run through AI providers under data processing terms. Your data is not used to train models.
Monitoring
Error tracking, automated health checks and a log of every CRM sync. Incidents are communicated to admins by email.
Documents
Security overview with questionnaire answers, DPA, subprocessor list and our latest external security scan on request.