Trust Center

Overview

Security Measures

Data Protection

AI Usage

Our Commitment to Security and Data Protection

At Mapp, we’re dedicated to keeping your data safe. Mapp Engage, Mapp Intelligence and Mapp Fashion are designed to help you connect with customers securely. We know that your trust is earned through transparency and robust security measures.

ISO 27001 Certified: Our information security management is certified under ISO 27001, including cloud-specific standards such as ISO 27017 (Cloud Security) and ISO 27018 (Cloud Privacy).
Additional Standards: We adhere to ISO 27701 for privacy management and ISO 22301 for business continuity, ensuring our services remain reliable even in disruptive situations.
Compliance: We meet key global regulatory standards, including GDPR, CCPA, NIS-2, and DORA.
Certified Sender Alliance: We follow the best practices in email marketing, ensuring both security and deliverability.
Independent Audits: Regular third-party audits and penetration tests help us continually strengthen our defenses and improve our security measures.

Key Security Measures

Hosting: Mapp Engage and Intelligence run in ISO 27001 certified data centers in Germany. Mapp Fashion is hosted on AWS in EU regions by default. This keeps your data secure and ensures it resides within EU boundaries.
Data Encryption: We use AES-256 encryption to protect sensitive data at rest and TLS 1.2+ for secure data transmission, safeguarding your data per state of the art.
Identity & Access Management: Multi-Factor Authentication and Role-based Access Control, as well as the option for Single Sign-On, ensure only authorized people can access your data. We review permissions regularly.
Vulnerability Management: Regular vulnerability scans and annual penetration testing help identify and fix risks. Redacted reports available on request.
Incident Response: Our 24/7 team responds swiftly to incidents, with regular drills and breach notifications sent within 24 hours.

Data Protection Features

Custom Data Collection: Collect only what you need for specific marketing purposes.
First-Party Analytics: 100% GDPR-compliant tracking, no reliance on third-party data.
Flexible Web Tracking: Choose between client-side (cookies) or server-side tracking for more control.
Email Tracking: Customize based on user consent – personalized, anonymized, or none.
Manage Consent & Rights: Easily handle requests for access, corrections, or opt-outs.
Data Ownership: You control your data with full legal guarantees.
What happens in Europe will stay in Europe: Upon request, we will limit access to your data to the European Union and the United Kingdom.
Privacy by Design: Privacy and security are built into our product features from the beginning using threat modelling techniques.

Responsible AI Usage

Customer-Specific AI Models: We use machine learning models tailored to your data, ensuring you retain full control.
AI Assistant: Our optional AI Assistant helps with tasks like content creation, always prioritizing privacy and compliance.
No Personal Data Shared: We never transmit personal data to AI services.
Full Transparency: You can always see what data is shared, ensuring clarity.
Safe AI Outputs: AI outputs are regularly reviewed to ensure accuracy and prevent bias.