Data protection

Last updated November 3, 2026

This document gives an overview of both the technical and organizational measures that we have put in place to keep your data safe.

Data Processing Agreement

When ChannelDock processes personal data on your behalf, our Data Processing Agreement (DPA) applies. It forms part of our Terms and Conditions, so it applies to every customer without a separate signature. A copy signed by ChannelDock can be downloaded on the Subscription page in the ChannelDock portal.

Download the Data Processing Agreement (version 1.2, November 3, 2026, PDF)

The subprocessors we use are listed on our subprocessors page. This page is provided for information; the DPA prevails if they differ.

Certified European data centers

Our main database and your feeds are stored in DigitalOcean-owned, European datacenters. These datacenters pass strict safety requirements, certifications, and are also GDPR-compliant. For more information see: https://www.digitalocean.com/trust/certification-reports/

Encryption

We encrypt data whenever possible. This means both while it is transported using industry-standard TLS and while it is stored. The disks in our datacenters are all encrypted at rest. We use modern TLS implementations and strong cipher choices.

Data deletion

Data deletion is done in accordance with industry-standard NIST 800-88.

Data replication

To ensure the safety and consistency of your data, we regularly back up your data, both on- and off-site. The backed up data is encrypted and stored in a physically secure facility. In the event of disaster, we are able to recover quickly since we test our data restoration procedure regularly. Data deleted from our active systems is removed from backups in the normal backup cycle, within 12 months.

Data consistency

We are strict about data consistency. We use stable and mature relational database technology and a strongly typed data model to realize this.

Anonymization

By default, ChannelDock automatically anonymizes any of your customer data that is handled, for e.g. order connections, after 90 days. Amazon is an exception to this, as PII data is only retained for less than 31 days. ChannelDock will only retain certain information that is fundamental to ensure that processes can be performed optimally.

AI features

AI features only send the data needed for the feature a user chooses. Data submitted to AI providers is not used to train their models, and ChannelDock does not use your data to train general-purpose AI models. An admin can turn off all AI features for the account in the settings.

Audit-ability

Actions within our tool are logged and tracked in a precise, structured format for auditing purposes. Server logs are centrally aggregated. This enables us to detect anomalies. We also keep detailed statistics about the performance of our infrastructure.

Found a problem?
Please contact us as soon as possible at
[email protected].