Zeta Global Trust Center
Welcome to the Sailthru by Zeta Global Security Assurance Portal. At Zeta Global, we prioritize the security of customer data. Our approach follows a defense-in-depth strategy, securing information across multiple layers, including physical, network, host, software, and user account protections.
We uphold industry-leading security standards, maintain a current attestation via a Service Organization Control (SOC) 2 Type 2 report, and conduct routine penetration testing. Our internal policies and controls are designed to protect customer data, ensuring access is limited to authorized employees performing their job responsibilities.
When engaging third parties to process customer data on our behalf, we require them to follow our written instructions, adhere to strict confidentiality obligations, and implement robust technical and administrative safeguards.
More specifically, we ensure:
- Confidentiality - Only authorized individuals can access customer data.
- Integrity - Data remains accurate and fit for its intended use.
- Availability - Authorized users can reliably access the data they need when needed.
Our commitment to security ensures that customer data is safeguarded at all times.
Service Levels
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.