SECURITY & COMPLIANCE
Your customers' data is safe with us.
We handle support for 750+ brands. That means we touch sensitive customer data every day - and we treat that responsibility seriously. Here's exactly what we do to protect it.
In plain English - not compliance jargon
-
We don't store your customer data
We work inside your existing helpdesk (Zendesk, Intercom, etc). Your ticket contents and end-user data never touch our servers. We only ever see anonymised performance metrics.
-
Your agents see only what they need
Every Influx agent is given access strictly scoped to the client they work on - nothing else. When an engagement ends, access is revoked immediately.
-
We're independently audited every year
Our controls are reviewed by a third-party auditor under the SOC 2 framework. We don't just write a policy - we prove it works.
What our team says
-
Architecture
Remote-first, cloud-native on AWS (US region). Least-privilege by default. Continuous monitoring and automated patching. No ticket data ever copied to Influx systems.
-
Identity & Access
MFA required for all system access. Role-based access control scoped per client. Access reviewed quarterly. Immediate revocation on offboarding.
-
Data Protection
TLS 1.2+ in transit. AES-256 at rest. Production data hosted in USA (AWS). Client metrics deleted on request. No PII copied outside client's own helpdesk environment.
-
Testing & Assurance
Annual third-party penetration testing. SOC 2 Type 1 audited. DR and BCP plans tested twice yearly. Incident response plan reviewed annually.
Common questions from legal & procurement
Are you GDPR compliant?
Yes. We act as a data processor under GDPR. We operate a Data Processing Agreement (DPA) available on request.
What about CCPA?
Yes. We comply with CCPA requirements for California residents. Contact us for specifics relevant to your business.
 6 Circle - small.png)