Security at Crunched | SOC 2, ISO 27001, GDPR

Security & Data Protection

Enterprise-grade security measures designed to protect your sensitive data with responsible AI practices and secure processing.

No Training on Your Data

We never use customer data for training AI models, either internally or through third-party providers. Your spreadsheet data, metadata and backups remains yours and is processed in a secure, isolated environment, and is not retained by us or third-parties.

Encryption

All customer data, including spreadsheets, metadata and backups, is encrypted in transit and at rest. In transit is encrypted using TLS 1.2+ with modern cipher suites. All persisted data is encrypted at rest using AES-256, in compliance with GCP encryption standards.

Data Residency

Data stays within the client's region: European data never leaves Europe, US data never leaves the United States, and the same applies to UK, MEA, and APAC deployments. Local and on-premise deployment options are supported for the most sensitive workloads.

Isolation & Tenant Separation

Each customer's session is logically isolated with no cross-access between customer data or conversations. Your data remains completely separate from other users at all times.

Data Retention & Deletion

Chat stored only for active sessions unless explicitly saved. Temporary logs are automatically purged, and users can request data deletion including all backups and logs at any time.

Compliance & Certifications

Enterprise security and data protection standards including GDPR compliance and ISO 27001 certifications, and SOC 2 certified.

Our Certifications

We maintain the highest standards for security and compliance

ISO 27001

Certified

GDPR

Compliant

SOC 2 Type 2

Certified