Security and Privacy of Your Data
Know where your CRM data is hosted, what Dedupely keeps, who can see it and how to delete it.
Dedupely keeps a copy of your synced CRM records while you use the service, so it can find and merge duplicates with your latest data. Your data is hosted in the USA on AWS and Google Cloud, it’s never sent to AI models, Dedupely’s support team can go into your account to see how you’re doing and help, and everything is deleted automatically after you cancel. Dedupely is ISO 27001:2022 certified, including ISO 27017 and ISO 27018.
Where is my data hosted?
Your data is processed in the AWS and Google Cloud North Virginia (USA) regions. AWS hosts Dedupely's application servers and databases, and Google Cloud is used for hosting, monitoring, logging and storage.
The full list of sub-processors is in the Trust Center.
What does Dedupely store?
| What | Why | How long |
|---|---|---|
| A copy of your synced records | To find duplicates and merge them with your latest CRM data | While you use Dedupely |
| Merge History | The original values of every merged record, so you can restore data | While you use Dedupely |
| Audit Log | Who did what in your workspace: merges, scans, setting changes, logins | While you use Dedupely |
| Your account details | Name, email and billing information | While you use Dedupely |
Only the objects you turn on are synced. Spreadsheets you upload stay in Dedupely and don't change your CRM.
How does Dedupely connect to my CRM?
- OAuth connections: HubSpot, Salesforce and Pipedrive connect through OAuth, and their short-lived access tokens are refreshed automatically.
- Nothing changes until you merge. Connecting and syncing never merge, edit or delete anything in your CRM.
- No AI models. Your records are never sent to, processed by or used to train third-party AI models, including in Dedupely Intelligence. See Dedupely Intelligence.
Who can see my data?
- Your team: only the users you invite, with the role you give them. Admins manage users and security settings. See Users.
- Dedupely support: Dedupely’s support team can go into your account to see how you’re doing and help. If you'd rather they didn't, ask support to switch it off.
- Merges, scans, logins and setting changes are logged in the Audit Log. See Audit Log.
To control how your team logs in (2FA, password rules, session timeouts and IP whitelisting), see Security Policy.
How to delete your data
Added
- Disconnect your CRM from Dedupely.
- Cancel your plan in Billing & Usage. See Billing & Usage.
Only need a break? On a monthly plan paid by card, you can pause once, for 1, 2 or 3 months, instead of cancelling. Your data and settings are kept, and your account is read-only while it's paused.
After you cancel, your data is deleted automatically. It isn't immediate, but everything in your account is deleted: your synced records, Merge History and Audit Log. Download your Merge History first if you want to keep a record of your merges. See Merge History.
What happens next
- After you disconnect, Dedupely stops syncing your CRM. Your CRM records stay exactly as they are.
- After you cancel, you keep access until the end of your billing period. Your data is deleted automatically, but not immediately.
- Deletion can't be undone. To use Dedupely again, connect your CRM and sync it from scratch.
FAQs about security and privacy
- Is Dedupely ISO certified? Yes. Dedupely is ISO 27001:2022 certified, including ISO 27017 (cloud security) and ISO 27018 (personal data in the cloud).
- Is my CRM data used to train AI? No. Your records are never sent to or used to train AI models.
- Can Dedupely employees see my CRM records? Yes. Dedupely’s support team can go into your account to see how you’re doing and help. You can ask support to switch this off.
- Where is my data stored? In the AWS and Google Cloud North Virginia (USA) regions.
- Is my data deleted when I cancel? Yes. It's deleted automatically after you cancel.
- Does Dedupely have a DPA? Yes. See the Data Processing Addendum.
- Where can I find security documents? In the Trust Center, with audits, reports and the sub-processor list.
Next up
Security Policy Require 2FA, set password rules and whitelist IP addresses for your team.Changelog
-
Pause a monthly plan instead of cancelling
A monthly plan paid by card can pause once, for 1, 2 or 3 months, from the cancel dialog. The account is read-only while paused, and a reminder email goes out 3 days before billing restarts.
Still stuck?
Our team helps on every plan and during the free trial, by chat, email or Zoom.
- Need help? Talk to support
- Questions about plans? Book a Zoom with sales
- Reading this with a model? Read this page as Markdown
- Feeding it the whole site? Read llms.txt
Or sign up with Google
Pipedrive user 
