º£½ÇÌìÑÄÉçÇø

Built around trust

Trust is a core principle at Gearset. We understand the kind of data that users trust Salesforce with, and º£½ÇÌìÑÄÉçÇø has been built to respect that data and that trust. We have invested a great deal of time, effort, and resources into ensuring that our users’ information is secure at all times. As a result, º£½ÇÌìÑÄÉçÇø has been certified by external auditors to the international information security standard ISO 27001.

For more information on our security controls, contact security@gearset.com to request our security whitepaper. You can also visit our for up-to-date versions of industry-standard documentation.

Compliance

ISO 27001

º£½ÇÌìÑÄÉçÇø has been audited and certified to the international information security standard ISO/IEC 27001:2022. This certification demonstrates that º£½ÇÌìÑÄÉçÇø has implemented a comprehensive, effective, and continually improving Information Security Management System. Certification involves regular audits to verify our compliance.

Data protection and privacy

Where we process personal data on behalf of our customers, we commit to do so in accordance with all applicable Data Protection Laws and Regulations, including UK GDPR and the Data Protection Act, EU GDPR, the CCPA/CPRA, and . For more information, see our document on

Secure hosting

º£½ÇÌìÑÄÉçÇø instances and storage are hosted on Amazon Web Services (AWS), the same data centers that Salesforce and Heroku trust for their computing needs. º£½ÇÌìÑÄÉçÇø offers hosting options in the United States, Canada, the European Union, and Australia to allow customers control over data residency. These industry-leading, secure facilities hold the following accreditations: SOC1, SOC2, SOC3, PCI DSS Level 1, ISO 27001, HIPAA and more.

These data centers are protected by the strictest security controls. Physical access to our servers is restricted to authorized personnel only. In addition to this physical security, º£½ÇÌìÑÄÉçÇø’s services run on our own VPC (Virtual Private Cloud) inside AWS to further isolate our networks, in accordance with networking and security best practices.