How do you protect our data?

Data security is a top priority for Heavy Duty CRM. It's hosted on secure, enterprise-grade cloud services (AWS and Google Cloud), so infrastructure-level protection is robust.

Under GDPR and EU Data Privacy Framework, the platform acts as a processor, while you remain the controller of the data. Legal protections include standard contractual clauses and documented policies for handling subject access and deletion requests.

The system includes administrative controls, backups, and recovery mechanisms to ensure both continuity and integrity of your data. Regular vulnerability testing is part of the product's security protocol.

Additionally, the platform adheres to its own Privacy Policy, which outlines how personal data is managed, retained, and shared—with clear guidelines on user rights and third‑party data handling.

In short, you get enterprise-level security combined with transparent control and legal compliance tools tailored to your responsibility as data controller.