GDPR and Security Compliance

How does Coupler.io operate in terms of security?

• Our product is designed to store data for a period of time required to provide users with stable integrations with different applications in a secure and encrypted state, prioritizing the protection of sensitive information. With robust encryption protocols in place, we ensure that your data remains confidential and its integrity remains intact.
• Coupler.io securely encrypts importer settings and credentials provided by users when setting up an importer.
• User data is automatically deleted within 7 days upon a user's request for account deletion. Users can also request full data deletion earlier by contacting our support team.

As for infrastructure security:

• All HTTP requests forcefully require SSL connections.
• We are also using the Heroku cloud provider with automatic data backup and failover handling.

Which data does Coupler.io collect, and how is my data security guaranteed?

To review information about collected data, data security, and data retention measures at Coupler.io, please read our Privacy Policy.

Does Coupler.io have an Information security policy that is updated annually?

We take all the needed measures, keep our technical stack up to date, monitor all vulnerabilities, and apply changes. We have internal rules and processes in place for managing the security of our product, which is regularly monitored and maintained. At the same time, we don't have this document publicly available.

What kind of security attestation does Coupler.io have?

Coupler.io is SOC 2 Type II certified, and our infrastructure is hosted on Google Cloud, which complies with multiple security standards and certifications, including SOC 2 Type II, ISO/IEC 27001, HIPAA/HITECH, FedRAMP, GDPR, and many others.

Does Coupler.io provide a guarantee for availability? Are your organization's contractual terms consistently met or exceeded?

We provide all guarantees that are stated in the Coupler.io Terms of Use.

Does Coupler.io provide Security Awareness Training to its employees?

Our team stays up to date with actual security measures, but we don't organize official training.

Is there a non-disclosure agreement in place between parties?

• We have an NDA signed between all our employees and contractors.
• Our Privacy Policy states the use of customers' information.
• We can sign an additional NDA upon request between Coupler.io and its customer.

Is there a business continuity plan in place? Is your business continuity plan updated at least annually?

Our business and product are stable. We don't share our business continuity plan publicly; however, we’ve taken all the measures required for technical product stability:

• regular data backups
• product monitoring
• failover systems

Our team processes are also built in a way to ensure our business continuity regardless of incidents, such as:

• a distributed product team
• polished remote work processes

Does your platform use AI or machine learning?

Coupler.io does not use customer data to train internal AI or machine learning models.

Our platform may act as a secure intermediary to transfer your data to third-party AI tools for analysis. In such cases, data is transmitted strictly for query execution and is not retained or used for model training by Coupler.io.

Where is customer data hosted and processed?

Customer data is primarily hosted and processed in the United States using Google Cloud Platform (GCP). At this time, localized data residency options in the EU or UK are not available. To ensure compliance with GDPR, Coupler.io relies on its Data Processing Agreement (DPA), which incorporates Standard Contractual Clauses (SCCs) and the UK Addendum.

You can find more details here:

• https://www.coupler.io/dpa
• https://www.coupler.io/security

How is my data kept secure when using AI Agent?

Coupler.io protects your data at every step. We're SOC 2 certified and GDPR, HIPAA, and DORA compliant.

You control exactly what data the AI Agent can access: only filtered, approved by you data is analyzed. When you talk with your data, the AI Agent only accesses it after you send a prompt.

The AI system that powers AI Agent by Coupler.io never connects directly to your apps; it works only with sample rows and aggregated data through Coupler.io's secure layer.

Your data and conversations are never used to train the AI model that powers AI Agent by Coupler.io.