Leadsourcing ensures data security through TLS v1.3 encryption, safeguarding communication between customer web applications and Leadsourcing systems. All customer data is encrypted at rest using AES-256-bit encryption during storage. To maximize security, we recommend configuring webhooks with TLS v1.2 or higher.
Access to sensitive customer data is tightly controlled and limited to authorized personnel. Employees access customer data strictly for essential tasks, such as resolving technical issues or addressing customer support inquiries.
Leadsourcing employs automated, policy-based data expiration to delete data once it has reached its retention schedule. For specific requests, such as privacy-related deletions, we process manual removal operations to ensure customer needs are met.
We maintain comprehensive security and privacy policies that provide clear guidelines for employees handling customer data. These policies are designed to meet international compliance standards and foster a culture of accountability and security.
Leadsourcing operates on the secure and reliable Google Cloud Platform (GCP), with data centers located in the us-central region.
The GCP infrastructure complies with major regulations, standards, and certifications, including: