Security

At Cargo, security is built into how the platform is designed and operated. Cargo processes GTM data across CRMs, data warehouses, enrichment providers, and sales tools, and applies controls around access, storage, processing, monitoring, and retention.

1. Customer data

Cargo processes customer data only as needed to provide the services and operate the workflows configured by the customer.

Depending on the customer’s configuration, Cargo may retrieve data from the customer’s CRM, data warehouse, or connected tools. Cargo may also store selected customer data where necessary to support workflow execution, orchestration, enrichment, scoring, routing, synchronization, logging, troubleshooting, auditability, and related platform functionality.

Cargo does not access, process, or retain customer data beyond what is necessary to provide the service, comply with applicable legal obligations, or meet contractual requirements.

2. Cargo database

Cargo stores operational data required to run the platform. This may include workspace settings, user and account information, workflow configuration, execution history, logs, enrichment results, scores, routing decisions, sync metadata, and account or contact records where enabled by the customer.

Cargo protects this data using secure cloud infrastructure, encryption in transit and at rest, access controls, backups, monitoring, vulnerability management, and retention and disposal procedures.

3. Security controls

Cargo uses role-based access controls, least-privilege access, monitoring, vulnerability scanning, encrypted communications, encrypted storage, backup controls, incident response procedures, vendor management, and documented security policies to protect customer data.

4. SOC 2 Type II

Cargo maintains a SOC 2 Type II report, a widely recognized standard for evaluating the effectiveness of a company’s controls around security, availability, and confidentiality. The report covers the Cargo Platform and received an unqualified opinion with no testing exceptions noted, providing independent assurance of Cargo’s commitment to maintaining the highest standards of security.

5. Contact

If you have any questions or concerns about our security practices, please don’t hesitate to contact us at engineering@getcargo.io.