Your installed-base data is sensitive. We treat it that way.
ServiceCPQ handles your product configurations, customer records, warranty claims and pricing — commercially sensitive data by nature. Here’s how the platform is built and operated to protect it.
Enterprise-grade hosting, encryption and residency.
Data encrypted in transit and at rest, on infrastructure built for enterprise workloads.
Regional hosting available for customers with data-locality or sovereignty requirements.
Your knowledge graph, documents and configurations are logically isolated from every other customer.
Regular automated backups with defined recovery objectives, reviewed as part of every enterprise contract.
You control who sees what, including the AI.
Single sign-on integrates with your identity provider — no separate ServiceCPQ passwords to manage.
Granular permissions down to dealer, region and module — including for portal and self-service users.
Every quote, claim decision and configuration change is logged with who, what and when.
Every agent — claims, adjudication, quoting — has a configurable review threshold before it acts autonomously.
We work inside your security review process, not around it.
As an enterprise software vendor, we expect a security questionnaire, a DPA and, often, a vendor risk assessment before go-live. The documentation below is shared directly with your security and procurement teams during evaluation.
Completed on request (SIG, CAIQ or your own format).
Standard DPA available, negotiable as part of your contract.
Shared on request during evaluation.
Current status and timeline shared directly — ask your contact.