Trust Center
Your sales data, kept safe.
How ZUUZ protects your email and CRM data: what we’re certified for, what we promise, and the documents your security team will ask for. All in one place.
Need the SOC 2 report or a DPA? Email contact@zuuz.ai
- SOC 2 Type I
- CCPA aligned
- OAuth only
- 60-day deletion
- Never trains general AI
- Patent pending
How your data is handled
From your inbox to your CRM, safely.
- 0passwords stored. Access is OAuth only.
- 60days until stored email content is deleted
- 1click to undo any CRM change
- 4U.S. patent applications on file
Security and privacy
What we promise, in plain words.
SOC 2 Type I
ZUUZ has completed a SOC 2 Type I audit. Customers can ask for the report under NDA at contact@zuuz.ai.
CCPA aligned
California residents can see, correct and delete their personal data. ZUUZ never sells or shares it. Read the privacy policy.
Managers see deals, not email
Leaders see deal status, risk and next steps. Personal, HR, legal and finance threads are filtered out before processing.
Deleted on schedule
Stored email content is deleted after 60 days, or sooner if you ask. Disconnect a mailbox and access stops right away.
OAuth access only
ZUUZ connects to Google Workspace and Microsoft 365 through OAuth. We never store passwords, and you can revoke access at any time.
Your data never trains general AI
AI runs on Google Cloud Vertex AI in ZUUZ’s own Google Cloud project, encrypted at rest. Your data is never used to train general AI models.
Read the details
Security documents and legal terms.
- Security overviewHow ZUUZ reads deals, not inboxes: access controls, filtering and change history.Read the overview →
- Security white paperMailbox access, retention, encryption, AI use and CRM change controls, as a free PDF.Get the white paper →
- Agent architectureHow every CRM and PSA update is logged with its source and can be undone in one click.See the architecture →
- Privacy policyWhat ZUUZ collects, why, how long it keeps it, and your rights, including in California.Read the privacy policy →
- Terms of serviceThe terms that govern use of ZUUZ.Read the terms →
- SOC 2 report and DPAThe SOC 2 Type I report and a data processing agreement are available to customers on request.Email contact@zuuz.ai →
Patent pending
ZUUZ’s core technology is patent pending.
Four U.S. patent applications are on file with the USPTO: three provisional applications and a non-provisional utility application, filed in October 2026, for technology that writes sales records into a CRM on its own.
01Is ZUUZ SOC 2 compliant?
ZUUZ has completed a SOC 2 Type I audit. Customers can ask for the report under NDA by emailing contact@zuuz.ai.
02Does ZUUZ read all of my team’s email?
ZUUZ connects to the sales inbox through OAuth and filters out personal, HR, legal and finance threads before anything is processed. Managers see deal status, risk and next steps, not the emails themselves.
03How long does ZUUZ keep email content?
Stored email content is deleted after 60 days by default, or sooner if you ask. If you disconnect a mailbox, ZUUZ’s access ends right away.
04Is my data used to train AI models?
No. AI runs on Google Cloud Vertex AI inside ZUUZ’s own Google Cloud project, encrypted at rest. Your data is never used to train general-purpose or foundational models.
05Does ZUUZ store our email passwords?
No. ZUUZ connects to Google Workspace and Microsoft 365 through scoped OAuth, so no passwords are stored. You can revoke access at any time.
06Is ZUUZ CCPA compliant?
ZUUZ is aligned with the CCPA. California residents can know, correct and delete their personal information, and ZUUZ does not sell or share it.
07Can we get a data processing agreement (DPA)?
Yes. A DPA and the SOC 2 Type I report are available to customers on request. Write to contact@zuuz.ai.
08Can we undo changes ZUUZ makes to our CRM?
Yes. Every CRM change is logged with its source and can be rolled back in one click. If someone edits a field by hand, ZUUZ keeps their edit.
Your security team has questions. We have answers.
Or email contact@zuuz.ai for the SOC 2 report and DPA.