Docupilot - Trust Center - Security & Privacy

At Docupilot, we recognize that the confidentiality, integrity, and availability of the data we create, maintain, and host are essential to both our success and the privacy of our partners.

We are committed to transparent communication about our security practices, tools, resources, and responsibilities, empowering our customers to trust us as a secure and reliable partner.

This Security Posture outlines our ongoing commitment to identifying and mitigating risks, implementing best practices, and continuously enhancing our security measures.

Founded in 2018

Compliances (5)

ISO 27001 v2022

Compliant

SOC 2

Compliant

GDPR

Compliant

HIPAA

Compliant

Controls

Continuously monitored

Product security (3)

Production System User Review

Vulnerability Remediation Process

Centralized Management of Flaw Remediation Processes

Data security (12)

Identify Validation

Termination of Employment

Production Databases Access Restriction

Network security (8)

Impact analysis

Limit Network Connections

External System Connections

App security (4)

Conspicuous Link To Privacy Notice

Secure system modification

Approval of Changes

Endpoint security (5)

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Endpoint Security Validation

Corporate security (32)

Code of Business Conduct

Organizational Structure

Roles & Responsibilities

Resources (47)

Code of Business Conduct Policy

Code of Business Conduct Policy outlines the expected behavior of all staff members, promoting a respectful and collaborative work environment.

HR Security Policy

HR Security policy establishes measures to safeguard company information and assets with respect to the employment lifecycle of staff members, from recruitment to termination.

Asset Management Policy

Asset Management policy outlines guidelines for the classification, protection, and responsible handling of company assets at all stages of their lifecycle.

Subprocessors (4)

AWS

United States of America

IT infrastructure

Microsoft

United States of America

Others

ConvertAPI

United States of America

Others

Mailgun by Sinch

United States of America

Others

FAQ (6)

Docupilot hosts data in AWS servers located in the United States, including customers’ personal data and the data that is processed on behalf of customers.

We have plans to launch more data-centres in upcoming months. Kindly reach out to support@docupilot.app if you are looking for your data to be hosted in a specific region.

Currently, Docupilot does not support this option. Please contact us for more information on this.

No, Docupilot does not sell or market your data to third parties.

You can find Docupilot's DPA on our Data Processing Addendum page.

Docupilot can’t sign DPAs from other companies. However, our DPA should be sufficient in any customer relationship with Docupilot. Docupilot’s DPA contains Standard Contractual Clauses (SCCs) for EU data and includes terms specific to how Docupilot's platform works.

Building trust, made easy by

Create your own Trust Center