Data retention policy
Hightouch does not store customer data long term, and we take great pride in our security-first architecture. We store customer data for at most 30 days, fully in compliance with GDPR and HIPAA. Optionally, a customer can provide us with credentials to an object storage system of their choice. By doing this 100% of customer data is stored on their end, rather than ours.
Our architecture and policies have passed numerous security reviews by healthcare and financial institutions.
Data archiving and removal policy
Hightouch can remove any and all customer data from our systems at the request of our customers. Additionally, customers can use their own object storage in which case there would be no data for them to request deletion for.
Data storage policy
Hightouch has strict policies around storage of customer data. All customer data must be stored in only object storage, either in our environment or in a customer's environment. This ensures that customer data can be purely hosted in a customer's environment if they choose.
Data center location(s)
United States
Data hosting details
Cloud hosted, in either our environment or in a customer's environment
App/service has sub-processors
no
App/service uses large language models (LLM)
no