Security

Security is built into how CSSignal works, not bolted on afterwards. This page summarizes how we protect the data you and your customers trust us with. For what we collect and how we use it, see our Privacy Policy.

Encryption

Your data is encrypted in transit and at rest. All traffic to CSSignal runs over HTTPS/TLS, and your platform data is stored encrypted by our infrastructure providers.

Access and authentication

Access to your workspace is controlled and authenticated. Multi-factor authentication is available on your account, and internal access to our systems is limited to the people who need it to run the service.

Where your data lives

CSSignal runs on established cloud infrastructure, Netlify and Supabase, both of which hold SOC 2 Type II certification for their platforms. To be precise about what that means: the certification belongs to those providers. CSSignal is not itself SOC 2 certified.

Payments

We never store your full payment card details. Payments are processed by Lemon Squeezy, acting as our Merchant of Record; they handle card data and PCI compliance, so sensitive card information does not touch our systems.

AI processing (Signal AI)

Our Signal AI features send relevant account data to Anthropic, our AI provider, solely to generate the insights you request. Anthropic does not use this data to train its models. See our Privacy Policy for the full description.

Your data is yours

You own the data you put into CSSignal. You can export or delete it, and we honor access, correction, and deletion requests. Email privacy@cssignals.com.

How we keep improving

We build with security in mind and review our code and configuration as the product evolves. No system is ever perfectly secure, but we work to protect your data and to keep access limited to those who need it.

Reporting a security issue

Found something that looks like a security problem? We want to hear about it. Email privacy@cssignals.com with the details and we will respond promptly.