Userpilot AI: Real-Time Insights, Predictions & In-App Fixes

Userpilot is a product experience platform that is used by hundreds of teams to deliver in-app experiences to their users. As a vendor that processes millions of data points on a daily basis, we take our customers and their users’ data very seriously. Userpilot takes full responsibility for all data that’s processed through the platform. Our data is fully encrypted, managed, and stored by SOC-compliant vendors such as Amazon AWS and Google Cloud.

Security Standards at Userpilot

GDPR

Userpilot ensures GDPR compliance to demonstrate its commitment to data protection. Customers and prospects can request our Data Processing Agreement (DPA) which outlines the measures implemented by Userpilot to protect user rights per the EU’s GDPR framework.

SOC 2 Type II

SOC 2 Type II certification ensures the security of client data processing by third-party service providers based on principles such as security, availability, processing integrity, confidentiality, and privacy. Current and potential customers can request the SOC 2 report from security@userpilot.com.

HIPAA

Userpilot ensures HIPAA compliance to uphold the highest security standards for customers in the health industry. While we do not inherently work with Protected Health Information (PHI), we provide assurances to customers handling PHI that our application strictly adheres to HIPAA guidelines.

Security Measures

  • Internal security: All projects undergo routine security assessments, including penetration tests by certified auditors. Access to data is limited to authorized personnel with strict authentication protocols.

  • Product security: Account access is controlled with Single Sign-On (SSO) integration for enterprise customers, and Multi-Factor Authentication (MFA) can be enforced on an account level.

  • Network and application security: The infrastructure is protected through failover and disaster recovery mechanisms, permissions control, and rigorous incident response protocols.

  • Additional Security features: We provide annual Security & Awareness Training, and all employee contracts include confidentiality agreements.

Availability

The Userpilot platform is built for maximum accessibility and uptime, utilizing AWS for hosting with real-time data syncing and daily backups. Our infrastructure is managed within Virtual Private Clouds (VPCs) to ensure total isolation.

Backups

Daily backups of application data are performed across multiple locations. Each instance is fully encrypted and secured.

User Data Deletion

Users can manage their data deletion through Userpilot’s HTTP API, which allows for the deletion of specific user or company data from records while tracking status.

Contact

To report any issues or request more information, please email us at security@userpilot.com.