Deepdesk B.V

Deepdesk B.V publishes an ISO certificate on its trust center; you can request access through SOC2C.

Deepdesk B.V's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Security isn't a single yes/no, but Deepdesk B.V is SOC 2 Type II compliant and holds ISO 27001, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Deepdesk B.V hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@deepdesk.com or via a /security page (Deepdesk B.V lists a security contact).

Deepdesk B.V lists 2 subprocessors on its trust center, including Google Cloud Platform, Microsoft Azure. Buyers use this for fourth-party risk review.

Deepdesk B.V hosts on GCP, Azure, and handles Customer personally identifiable information, Employee personally identifiable information. Data residency details are on its trust center.

Deepdesk B.V's trust center is at https://trust.deepdesk.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Deepdesk’s seamlessly integrated with any platform, including industry leading contact center solutions like Genesys, RingCentral, NICE, Salesforce, LivePerson, Zendesk, Dimelo, etc.

To meet compliance and privacy needs, we offer an extensive PII filter to anonymize customer data which performs with leading industry standards recognition rates. We employ state-of-the-art transformer based NER’s (entity recognition) such as Flair, as well as rule based filtering. Deepdesk is also fully GDPR compliant and is ISO 27001 compliant since 2022. By default we do not employ or share any algorithmic data with other AI services. No data is ever shared between tenants, and we do not use data without permission for generic models.

To meet compliance and privacy needs, we offer an extensive PII filter to anonymize customer data which performs with leading industry standards recognition rates. We employ state-of-the-art transformer based NER’s (entity recognition) such as Flair, as well as rule based filtering.

No. By default we do not employ or share any algorithmic data with other AI services. No data is ever shared between tenants, and we do not use data without permission for generic models. We serve from the Google Cloud platform in Europe. We provide a multi-tenanted, cloud-based, SaaS solution, with strict data and network segregation per tenant. The architecture provides isolated tenant environments, with strict data and network segregation. Using data and resource location policies, we can ensure that the creation of resources is limited to a region you define, and that your data never leaves the specified region. The default region in The Netherlands is ‘europe-west4’ (Eemshaven, Groningen), but any region supported by Google Cloud can be used.

Deepdesk utilizes Google Cloud in Europe for the hosting and serving of our services and data storage, we do not employ or share any algorithmic data with the other AI services. No data is shared between tenants, and we do not use data without permission for generic models. By default we serve from the Google Cloud platform in Europe. As such, Deepdesk inherits the control environment which Google Cloud maintains and demonstrates via their ISO 27001 certification by EY. Our architecture enables ML models per brand, channel, or per organization. This means our tenants are able to configure Deepdesk on a global scale, with deployments per country, language, brand, or channels such as chat, messaging, or voice and manage this in one place with our Studio. For large enterprise customers who need an extra level of security and data isolation to meet their specific compliance and regulatory needs, we offer a dedicated environment. This environment and its resources are completely dedicated and customized to your implementation needs. Each instance contains its own load balancers, public IP addresses, databases, VPC networks, VPN server, and Kubernetes cluster

We work with the roles and rights infrastructure of Google Workspace for logical access control, access control to data, data entry control, appropriation control, retention, and deletion of data. We use the integral functionality of the Enterprise Security Command Center including threat and intrusion detection and logging. The integrated Security Command Center allows for continuous compliance monitoring, access control monitoring, audit logs, and real-time notifications and remediation across the Deepdesk platform. Compliance monitoring enables realtime reporting to help ensure all our resources are meeting their compliance requirements with PCI-DSS compliance monitoring, CIS compliance monitoring, and Security Health Analytics according to ISO 27001. All cloud components have mandatory audit logging enabled. This is enforced at the organization level and cannot be turned off. Audit logs cannot be deleted and/or changed. We use Security Command Center to alert us on any sensitive permission changes and/or security issues. All Deepdesk components produce detailed logging to track errors and provide insight into application performance.