Keeping your data safe is our top priority

Open source

Our code base is open source, and is used and reviewed by thousands of developers. Additionally,we are the only platform of our kind that is open source and lets you self-host your data. This way, even the largest or most regulated businesses can use crowd.dev and keep control over their own data. If you would like to self-host or discuss further, talk to our team.

Secure servers

If you go for our hosted version, our infrastructure is managed by AWS, guaranteeing the most comprehensive security and reliability. Our servers are in the EU and comply with GDPR standards.

Vulberability scanning & penetration testing

We conduct vulnerability scans with every pull request. Additionally, we undergo penetration testing by an external CREST accredited security firm once per year.

GDPR & CCPA ready

We comply with the California Consumer Privacy Act (CCPA) and General Data Protection Regulation for EU residents (GDPR) for which we provide and sign a Data Processing Agreement (DPA). If you would like to enter into a DPA please reach out to security@crowd.dev.

SOC 2 Type II certification (in progress)

We are continuously monitored by Drata and being audited by an accredited firm.  We are currently well underway with our SOC 2 Type II accreditation to show our continuous upholding of security standards. SOC 2 defines criteria for managing data based on: security, availability, processing integrity, confidentiality, and privacy.

99% uptime

We have a 99% uptime. You can check out our status page at any time to be informed on the current status or any incidents and updates if they do occur.

Natively-built integrations

All of our data sources and destinations built with official APIs and conform to the terms of service of the 3rd party providers. You never need to worry about compromising data quality or privacy when using crowd.dev.