Kustomer

Kustomer has added ClickHouse, Inc. as a subprocessor to support reporting and analytics within the Kustomer platform. For more information, see our Subprocessor List and Data Protection Addendum.

We’ve updated our Cloud Security Alliance (CSA) Consensus Assessments Initiative Questionnaire (CAIQ) to version 4.1.0 and published it in our Trust Center. This refresh helps ensure our security and privacy responses remain aligned to the latest CSA guidance and provides customers with clearer, up-to-date information for due diligence and risk assessments. CAIQ v4.1.0 was released on January 27, 2026, and our Trust Center now includes the updated questionnaire for review. If you rely on CAIQ mappings as part of your vendor assessment, you can use this version to support internal reviews, procurement, and compliance workflows.

To provide greater transparency into how we protect customer data, Kustomer has released an updated Security Datasheet, now available to all visitors through our Trust Center. The datasheet includes: - Highlights of in-app security features such as SSO, role-based access controls, IP allow listing, granular permissions and masking, and other controls built directly into the Kustomer app. - Highlights of Kustomer’s internal security program including our approach to data protection, secure development, incident management, vendor risk management, business continuity, and compliance. These highlights are intended to give security, privacy, and procurement teams a concise overview of how Kustomer protects customer data across both the product and our internal operations. For organizations that require deeper documentation, we also make Kustomer’s Information Security Policies available under NDA. These policies provide more detailed coverage of topics such as access management, secure development, incident response, vendor management, and data retention and disposal. - The Security Datasheet can be downloaded directly from the Kustomer Trust Center. - Information Security Policies can be requested through the Trust Center and will be shared under NDA.

Kustomer is pleased to announce that our latest SOC 2 Type II report is now available to customers and prospects via our Trust Center under NDA. This independent examination validates the design and operating effectiveness of our controls to safeguard customer data and keep our platform resilient and reliable. As part of our broader compliance program, Kustomer has also successfully completed an independent audit against ISO/IEC 27001:2022, the globally recognized standard for information security management systems. Together, these attestations demonstrate our commitment to maintaining strong security practices, rigorous access controls, and robust monitoring and incident response processes across our environment. If you are a current or prospective customer and would like access to the SOC 2 Type II report and ISO 27001 certificate, please submit a request through the Kustomer Trust Center so we can provide them under NDA.

We are proud to announce that Kustomer has been awarded ISO/IEC 27701:2019 certification, the leading international standard for Privacy Information Management Systems (PIMS). This certification extends the foundation of our ISO 27001 security framework to include robust, independently audited controls for the collection, processing, and protection of personal data. It demonstrates our commitment to aligning with global privacy regulations such as GDPR and CCPA, and provides customers with additional assurance that their data is handled with the highest standards of accountability and transparency. By achieving ISO 27701, we strengthen our position as a trusted partner, giving customers confidence that privacy and security are central to everything we do.