Company · Security
Your data, handled the way we would want ours handled.
Hosting in the European Union, named subprocessors, encryption, retention periods: it is all written here, and we claim nothing we do not have.
Rights of access, rectification, erasure, restriction, objection and portability; response within 30 days; complaints can be filed with the CNIL (French data protection authority).
Certification process underway. ZivRank is not yet ISO 27001 certified.
Hosting and subprocessors
Every subprocessor is named, with the entity that processes the data, its country and the contractual framework.
- All data travels over HTTPS.
- Databases are encrypted at rest.
- Access is restricted and authenticated, limited to authorized staff.
- No tracking cookies: audience measurement works without cookies.
Frequently asked questions
Is ZivRank GDPR compliant?
Yes. Data is processed in accordance with the GDPR, with subprocessors bound by a data processing agreement (DPA). You can exercise your rights at any time by contacting dpo@zivrank.com.
Is ZivRank ISO 27001 certified?
Not yet. The ISO/IEC 27001 certification process is underway. We will state it here as soon as it is obtained.
Where is the data hosted?
The website is hosted by Cloudflare Germany GmbH, in the European Union, and our orchestration server by Hetzner in Germany. The CRM database is operated by Airtable in the United States: this is the only transfer outside the EU, covered by a signed DPA and Standard Contractual Clauses.
Security and data protection contact: dpo@zivrank.com. See also our privacy policy and legal notice.
A question from your security or procurement team?
Write to us: we answer your security and compliance questions.