Security / trust page — found from the homepage — Deskpro

Cited by

Facts read from this source

• ISO 27001 Report an error

  “ISO 27001 Specifies requirements for an ISMS to manage sensitive info securely”

• SOC 2 type2 Report an error

  “SOC 2 Type II Reports on control effectiveness over time for Trust Services Criteria”

• Pci dss Report an error

  “PCI DSS Protects payment card holder data from breaches & theft”

• GDPR Report an error

  “GDPR EU regulation protecting citizens' data & privacy rights”

• HIPAA Report an error

  “HIPAA US law securing protected healthcare information”

• G cloud Report an error

  “G-Cloud UK government initiative promoting cloud use in public sector with a procurement framework”

• Csa star Report an error

  “Cloud Security Alliance Promotes secure cloud environments via best practices”

• Cyber essentials plus Report an error

  “Cyber Essentials Plus Scheme ensuring basic level of cybersecurity measures in place”

• CCPA Report an error

  “California Consumer Privacy Act Enhancing CA residents' privacy rights through stronger consumer protections”

• DPA Report an error

  “Deskpro provides tools and controls to help you meet GDPR obligations, along with a comprehensive Data Processing Agreement (DPA).”

• Deployment options Report an error

  “the ability to choose how to deploy Deskpro, either on the Cloud or in a Private (self-hosted) environment, and control over where your data is stored.”

• Provider Report an error

  “For our cloud hosting, we use industry-leading AWS.”

• Uptime SLA Report an error

  “Deskpro delivers over 99.9% availability on our cloud platform, supported by redundant infrastructure and continuous monitoring. Customers can view real-time and historical performance on our public status page.”

• Data centers certifications Report an error

  “Our cloud service data-center provider (AWS) operates state-of-the-art, ISO27001, PCI DSS Level 1, HIPAA, EU-US Privacy Shield & SOC 2 Type compliant data centers.”

• Cloud regions standard Report an error

  “Deskpro offers deployment of Cloud accounts onto data centers located in either the US, EU or UK. Customers can choose which region they wish to exclusively host their data in, as standard.”

• Enterprise regions Report an error

  “Enterprise plan customers can choose to host in 1 of 22 countries around the world.”

• Pen test crest Report an error

  “Independent penetration testing by a certified CREST CHECK 3rd party is carried out on at least an annual basis.”

• Customer pen tests Report an error

  “We welcome customers to perform their own penetration testing on a Deskpro environment. If you wish to arrange one, please contact support for scheduling this, and for further pricing.”

• Credit card storage Report an error

  “Deskpro doesn't store credit card data. We use external PCI compliant services (Spreedly and Stripe) to provide billing services.”

• SSO Report an error

  “Admins can configure multiple options for SSO to the Deskpro platform, including OneLogin, Okta, Azure, SAML, and JWT authentication.”

• Two factor auth Report an error

  “Deskpro enables 2FA through your SSO provider for admins, agents, and customers.”

• Custom password policies Report an error

  “Customizable Password Policies can be enabled for both agents and customers. This includes the ability to set minimum password length, forbidding password reuse, a mixture of numbers and characters, and forcing customers to change their password after a certain amount of time.”

• Audit logs Report an error

  “Comprehensive audit logs are kept for changes made by administrators.”

• Encryption at rest Report an error

  “All customer data stored encrypted on AWS servers (with the AES-256 encryption algorithm).”

• Encryption in transit Report an error

  “Web traffic over HTTP is secured by CloudFlare with TLS 1.2 or 1.3 using proven-secure cipher suites.”

• Backup retention Report an error

  “Should you no longer wish to use Deskpro, we maintain backups of your accounts for 60 days - after which your data is completely deleted from all our systems.”

• Point in time recovery Report an error

  “Primary backups offer point-in-time recovery for 35 days. Encrypted offsite backups are updated daily.”

• Deletion Report an error

  “Your data is securely deleted immediately from our primary data stores upon request. Encrypted offsite backups of your data get purged through regular backup rotation every 60 days.”

• Database backups Report an error

  “We use AWS with redundancy over at least two availability zones, with database backups offering 35-days worth of point-in-time recovery if needed. Additional encrypted off-site backups are updated daily.”

• AI bedrock Report an error

  “Run Deskpro AI on your choice of Bedrock foundation models with end-to-end encryption and safe model customization”

• Aws privatelink Report an error

  “AWS PrivateLink Private, secure connectivity between Deskpro and Amazon Bedrock—no public internet, traffic stays on AWS”

• Entity Report an error

  “© Copyright 2026 Deskpro Inc. All rights reserved.”

• Status page Report an error

  “There is a publically available status page, where you can check the status of the cloud software and its components.”

• Security incident response Report an error

  “Deskpro monitors cloud service 24/7 and has a response team on call 24/7 to respond to security incidents.”

• Security white paper Report an error

  “Learn how Deskpro ensures the data in your help desk is always secure, whether you choose Cloud or Private deployment.”

• Scc Report an error

  “Standard Contractual Clauses (SCC)”

• Certifications list Report an error

  “ISO 27001 SOC 2 Type II Cyber Essentials Cyber Essentials Plus CSA Star GDPR G-Cloud PCI-DSS CCPA Standard Contractual Clauses (SCC)”

• Pen test frequency Report an error

  “Third party penetration testing is also completed on an annual basis.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agent Advocate European sovereignty
• The Agent Advocate Customer data protection
• The Agent Advocate European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer Integrations & API
• The Data Protection Officer European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator European sovereignty
• The Integrator Customer data protection
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator Integrations & API
• The Integrator European sovereignty
• The Skeptic Customer data protection
• The Skeptic European sovereignty
• The Skeptic Customer data protection
• The Skeptic Integrations & API
• The Skeptic European sovereignty
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead European sovereignty