Trust Center
Security and compliance at Dedupely
At Dedupely, your privacy and security are at the heart of everything we do.
ISO/IEC 27001:2022
Information Security Management System
ISO/IEC 27001:2022 is the latest revision of the international standard for information security. It specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system, and covers how Dedupely handles customer CRM data end to end.
Independent audit: Mastermind
ISO 27017
Cloud security
ISO 27017 extends ISO 27001 with controls written specifically for cloud services: how a provider segregates tenants, administers virtual machines and hands responsibility back to the customer. Dedupely runs entirely in the cloud, so this is the control set that governs the infrastructure your records are processed on.
Independent audit: Mastermind
ISO 27018
Personal data privacy in the cloud
ISO 27018 is the standard for protecting personally identifiable information in a public cloud. It governs consent, what a processor may do with personal data, and what happens to it on request or on deletion — the questions a DPA review asks about the contact records you sync to Dedupely.
Independent audit: Mastermind
Penetration test
Independent security audit, Grade A+
Dedupely’s application is tested by an external security firm, which probes it the way an attacker would and re-tests once findings are remediated. The certificate records the grade awarded and the period it covers.
Independent audit: Astra Security
Subprocessors
Cloud infrastructure provider hosting Dedupely’s application servers and databases.
Source code hosting and version control platform for Dedupely’s software development and issue tracking.
Cloud platform used for additional infrastructure, server logging, and data storage to support Dedupely’s product.
Business email suite for internal company communications and file storage.
Customer relationship management and marketing automation platform for storing lead/customer contact info and communications.
Online payment processor handling Dedupely’s subscription billing and credit card transactions.
Internal messaging platform for team communication and real-time alerts (including system and security notifications).
Video conferencing service used for customer calls (support, onboarding, training) and internal team meetings.
Security testing provider running penetration tests against Dedupely’s application.
Securely stores and manages Dedupely’s passwords and credentials for various systems.
Tracks and manages affiliate referrals and commissions for Dedupely’s partner program.
Backs up cloud data (emails, documents, etc.) from Dedupely’s systems to prevent data loss.
Sends transactional and marketing emails to Dedupely customers.
No subprocessor matches that search.
Frequently asked questions
Data Access & Permissions
Who has access to my CRM data during deduplication?
Your data remains private and secured. Dedupely ensures that no unauthorized users, including Dedupely employees, can access or modify your CRM records.
Data Security & Encryption
How is my CRM data protected during deduplication?
Dedupely’s algorithm includes built-in safeguards to prevent anomalies from affecting your data. However, you maintain full control over merge actions and should review results for accuracy.
Data Retention & Deletion
Does Dedupely store my data after deduplication?
Yes, Dedupely retains a cached copy of your data while you use the service. This allows us to continuously find and merge duplicates using the latest updates in your CRM.
Can I permanently delete my data from Dedupely?
Yes, you have full control over your data. You can delete it from Dedupely at any time.
Compliance & Certifications
Is Dedupely compliant with industry security standards?
Yes. Dedupely is ISO 27001:2022 certified, including ISO 27017 (Cloud Security) and ISO 27018 (Personal Data Privacy in the Cloud).
API & Third-Party Integrations
How does Dedupely secure API connections to CRMs like HubSpot, Salesforce, and Pipedrive?
We use OAuth authentication and rotate tokens continuously to ensure security. Permissions are carefully managed to prevent unnecessary access.
User Authentication & Access Control
How does Dedupely ensure secure user authentication?
Dedupely offers Two-Factor Authentication (2FA), session timeouts, Google sign-in, and encrypted passwords. IP whitelisting is also available for extra security.
Does Dedupely offer two-factor authentication (2FA) for added security?
Yes, 2FA is available to add an extra layer of security.
Can I control which team members have access to Dedupely?
Yes, you have full control over user roles and permissions. You can add, edit, and remove users as needed.
Audit Logs & Activity Monitoring
Can I track changes made through Dedupely?
Yes. Dedupely maintains activity logs, tracking both merges and user actions for transparency.
Data Residency & Regional Compliance
Where is my data processed and stored?
Your data is processed in Google Cloud and AWS North Virginia (USA) regions.
Support & Incident Response
What happens if there is a security breach?
Dedupely follows a structured Incident Response Plan compliant with ISO 27001, 27017, and 27018 standards. If a security breach occurs: Detection & Reporting: Employees report incidents immediately, and severity is classified (P0–P3). Containment & Mitigation: The Incident Response Team (IRT) assesses impact and executes rollback plans if necessary. Investigation & Root Cause Analysis: Logs and evidence are reviewed to determine the cause and prevent recurrence. Communication & Notification: Affected users, regulatory bodies, and internal executives are informed per legal requirements. Remediation & Prevention: Vulnerabilities are patched, monitoring is enhanced, and preventative measures are implemented. Post-Incident Review: Findings are documented, and lessons learned are integrated into security practices. Compliance & Audit: Incident responses are logged for audit and regulatory compliance.
About Dedupely
What does Dedupely do for my CRM?
Dedupely makes it easy to clean up duplicate records in your CRM. You can bulk merge, auto-merge, or review duplicates one at a time — whichever works best for you.
How is Dedupely different from my CRM?
Dedupely gives you full control over duplicates. You decide which records to merge, how they’re merged, and which data to keep. With features like auto-merge, bulk processing, and customizable rules, Dedupely streamlines the cleanup process while letting you maintain accuracy.
Can I customize Dedupely’s settings?
You can set up rules and filters to match your CRM’s specific needs and preferences.
No question matches that search.
