Trust Center

Overview

Welcome to Sales Layer's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.

Compliance

• GDPR
• ISO/IEC 27001:2022
• PCI DSS v4.0.1

Documents

Get access

• REPORTSPCI DSS
• REPORTSPentest Report
• COMPLIANCEISO/IEC 27001:2022
• COMPLIANCEPCI DSS v4.0.1
• PRODUCT SECURITYProduct Architecture

Risk Profile

• Recovery Time Objective 8 hours
• Recovery Point Objective 24 hours
• Third Party Dependence Yes

Product Security

• Audit Logging
• Data Security
• Multi-Factor Authentication

Reports

• PCI DSS
• Pentest Report

Self-Assessments

• CAIQ

Data Security

• Access Monitoring
• Data Asset Classification
• Data Backups

App Security

• Application Penetration Testing
• Bot Detection
• Code Analysis

AI

• AI Overview
• AI Feature
• AI Training Data and Bias

Legal

• Subprocessors
• Customer Audit Rights
• Cyber Insurance

Data Privacy

• Cookies
• Data Breach Notifications
• Data Privacy Officer

Access Control

• Data Access
• Internal Single-Sign-On (SSO)
• Least Privilege

Infrastructure

• Amazon Web Services
• Anti-DDoS
• Separate Production Environment

Endpoint Security

• Anti-Malware
• Disk Encryption
• DNS Filtering

Network Security

• Bot Detection
• Data Loss Prevention
• Distributed Denial of Service Protection (Anti-DDoS)

Corporate Security

• Asset Management Practices
• Email Protection
• Internal SSO

Policies

• Access Control Policy
• Backup Policy
• Incident Response Policy

Security Grades

• SecurityScorecard Sales Layer
• BitSight 780
• Qualys SSL Labs A

Incident Response

• Designated Response Personnel
• Incident Reporting Process
• Pager Service

Risk Management

• Data Access/Impact Levels
• Risk Assessments
• Supply Chain Risk Management

Asset Management

• Asset Classification
• Asset Inventories (Hardware/Software)
• Asset Tracking

BC/DR

• Alternate Processing/Storage Site
• Business Continuity Management System (BCMS)
• Business Continuity Plan (BCP)

Training

• Employee Privacy Training
• Phishing Training
• Role-Based Training

Continuous Monitoring

• Automated Alert Response
• Automated Compliance Monitoring
• Data Loss Prevention System (DLP)

Subprocessors

If you need help using this Trust Center, please contact us.