Customer data is used solely for generating insights - never to train AI models.
Data is encrypted at rest and in transit, using industry-leading standards.
Self-service deletion, role-based access levels, SSO integration. Only email and name required.
Optional deployment on your own cloud infrastructure.
ISO 27001:2022 certified with zero non-conformities; annual surveillance audits.
Country-specific hosting keeps data within your chosen jurisdiction.
Customer data can be hosted and processed in the European Union or the United States, depending on the customer’s selected region and contractual arrangement.
Relevant subprocessors may process data only where necessary to provide the service and are subject to appropriate security, confidentiality and data-protection requirements. Appropriate safeguards are applied where international data transfers are required.
No. Cellbyte does not use customer data to train shared or general-purpose AI models.
Customer data is processed only as necessary to provide the contracted service. Third-party AI services are subject to Cellbyte’s security, privacy and supplier-management requirements.
Customer data is protected using strong, industry-standard encryption when stored and when transmitted over public networks. Cryptographic controls are regularly reviewed to ensure they remain appropriate for the information being protected.
Cellbyte performs an internal audit of its Information Security Management System at least annually. Additional security reviews and assessments are conducted based on risk and significant changes to the service.
Yes. Cellbyte maintains separate development, testing and production environments.
Customer production data is not used in development or testing as a standard practice. Any exceptional use must be authorised, limited to what is necessary and appropriately protected.
Yes. Cellbyte supports Single Sign-On (SSO) through SAML 2.0 and OpenID Connect (OIDC), allowing integration with common identity providers. Multi-factor authentication can also be enforced through the customer’s identity provider.