# Security and Privacy of Your CRM Data in Dedupely | Dedupely > Where Dedupely hosts your CRM data, what it stores, who can see it, and how it's deleted when you cancel. ISO 27001 certified. - URL: https://dedupe.ly/knowledge-base/security-and-privacy-of-your-data - Section: knowledge-base - Site index: https://dedupe.ly/llms.txt - Any page: append `.md` to its URL for this plain-text form --- ## Security and Privacy of Your Data By [Gaby Salinas](https://www.linkedin.com/in/gbyslns) Updated October 28, 2026 Know where your CRM data is hosted, what Dedupely keeps, who can see it and how to delete it. Dedupely keeps a copy of your synced CRM records while you use the service, so it can find and merge duplicates with your latest data. Your data is hosted in the USA on AWS and Google Cloud, it’s never sent to AI models, Dedupely’s support team can go into your account to see how you’re doing and help, and everything is deleted automatically after you cancel. Dedupely is ISO 27001:2022 certified, including ISO 27017 and ISO 27018. ### Where is my data hosted? Your data is processed in the AWS and Google Cloud North Virginia (USA) regions. AWS hosts Dedupely's application servers and databases, and Google Cloud is used for hosting, monitoring, logging and storage. The full list of sub-processors is in the [Trust Center](https://dedupe.ly/trust). ### What does Dedupely store? | What | Why | How long | | --- | --- | --- | | **A copy of your synced records** | To find duplicates and merge them with your latest CRM data | While you use Dedupely | | **Merge History** | The original values of every merged record, so you can restore data | While you use Dedupely | | **Audit Log** | Who did what in your workspace: merges, scans, setting changes, logins | While you use Dedupely | | **Your account details** | Name, email and billing information | While you use Dedupely | Only the objects you turn on are synced. Spreadsheets you upload stay in Dedupely and don't change your CRM. ### How does Dedupely connect to my CRM? - **OAuth connections:** HubSpot, Salesforce and Pipedrive connect through OAuth, and their short-lived access tokens are refreshed automatically. - **Nothing changes until you merge.** Connecting and syncing never merge, edit or delete anything in your CRM. - **No AI models.** Your records are never sent to, processed by or used to train third-party AI models, including in Dedupely Intelligence. See [Dedupely Intelligence](https://dedupe.ly/knowledge-base/dedupely-intelligence). ### Who can see my data? - **Your team:** only the users you invite, with the role you give them. Admins manage users and security settings. See [Users](https://dedupe.ly/knowledge-base/users). - **Dedupely support:** Dedupely’s support team can go into your account to see how you’re doing and help. If you'd rather they didn't, ask support to switch it off. - **Merges, scans, logins and setting changes are logged** in the Audit Log. See [Audit Log](https://dedupe.ly/knowledge-base/audit-log). To control how your team logs in (2FA, password rules, session timeouts and IP whitelisting), see [Security Policy](https://dedupe.ly/knowledge-base/security-policy). ### How to delete your data Added October 15, 2026 - **Disconnect your CRM** from Dedupely. - **Cancel your plan** in **Billing & Usage**. See [Billing & Usage](https://dedupe.ly/knowledge-base/billing-usage). **Only need a break?** On a monthly plan paid by card, you can pause once, for 1, 2 or 3 months, instead of cancelling. Your data and settings are kept, and your account is read-only while it's paused. After you cancel, your data is deleted automatically. It isn't immediate, but everything in your account is deleted: your synced records, Merge History and Audit Log. Download your Merge History first if you want to keep a record of your merges. See [Merge History](https://dedupe.ly/knowledge-base/merge-history). ### What happens next - After you disconnect, Dedupely stops syncing your CRM. Your CRM records stay exactly as they are. - After you cancel, you keep access until the end of your billing period. Your data is deleted automatically, but not immediately. - Deletion can't be undone. To use Dedupely again, connect your CRM and sync it from scratch. ### FAQs about security and privacy - **Is Dedupely ISO certified?** Yes. Dedupely is ISO 27001:2022 certified, including ISO 27017 (cloud security) and ISO 27018 (personal data in the cloud). - **Is my CRM data used to train AI?** No. Your records are never sent to or used to train AI models. - **Can Dedupely employees see my CRM records?** Yes. Dedupely’s support team can go into your account to see how you’re doing and help. You can ask support to switch this off. - **Where is my data stored?** In the AWS and Google Cloud North Virginia (USA) regions. - **Is my data deleted when I cancel?** Yes. It's deleted automatically after you cancel. - **Does Dedupely have a DPA?** Yes. See the [Data Processing Addendum](https://dedupe.ly/legal/dpa). - **Where can I find security documents?** In the [Trust Center](https://dedupe.ly/trust), with audits, reports and the sub-processor list. ### Next up [Security Policy Require 2FA, set password rules and whitelist IP addresses for your team.](https://dedupe.ly/knowledge-base/security-policy) ### Changelog - October 15, 2026 #### Pause a monthly plan instead of cancelling A monthly plan paid by card can pause once, for 1, 2 or 3 months, from the cancel dialog. The account is read-only while paused, and a reminder email goes out 3 days before billing restarts. [Every change in the knowledge base](https://dedupe.ly/knowledge-base#changelog) ### Still stuck? Our team helps on every plan and during the free trial, by chat, email or Zoom. - Need help? [Talk to support](https://dedupe.ly/contact) - Questions about plans? [Book a Zoom with sales](https://meetings.dedupe.ly/meetings/gaby-salinas/talk-to-sales) - Reading this with a model? [Read this page as Markdown](https://dedupe.ly/knowledge-base/security-and-privacy-of-your-data.md) - Feeding it the whole site? [Read llms.txt](https://dedupe.ly/llms.txt) Behind the article ### Gaby Salinas Marketing Assistant at Dedupely Gaby Salinas came to CRM data from marketing and advertising, so she looks at duplicates from two sides: the match and merge logic behind them, and what they do to the people using the CRM, like the rep who calls a customer twice, the admin who gets blamed and the cleanup nobody wants to start. As Marketing Assistant at Dedupely, she follows how RevOps teams, end users, consultants and technical teams actually work with their data: the records they stop trusting, the workarounds they build and the moment they finally decide to clean up. What she finds shapes most of what Dedupely publishes. [Connect with Gaby on LinkedIn](https://www.linkedin.com/in/gbyslns) ### Get started for free 20 free trial merges and as much free support as you need to get your duplicates under control. [Talk to sales](https://meetings.dedupe.ly/meetings/gaby-salinas/talk-to-sales)[Try for free](https://v2.app.dedupe.ly/signup) [Or sign up with Google](https://v2.app.dedupe.ly/signup/google) Running CRM cleanup for clients? [See the Partner Program](https://dedupe.ly/become-a-partner) Skip to content