Security Overview

Demand Trail is designed as a multi-tenant business application. We maintain reasonable administrative, technical, and organizational safeguards for the Services and infrastructure under our control, taking into account the nature of the Services and the risks presented by the processing.

This page describes the shared responsibility model and how to report security issues. It does not disclose sensitive implementation details.

Demand Trail is responsible for reasonable safeguards for the Services and infrastructure under its control.

Customers are responsible for their Authorized Users, credentials, role and permission configuration, Connected Service access, endpoint security, lawful Customer Data, and secure handling of exports and API credentials.

Access to protected product functionality requires authentication. Customers control invitations, roles, and permissions for Authorized Users within their tenant.

Where Demand Trail processes Customer Personal Data on behalf of a Customer, the Data Processing Addendum describes our processing and security obligations.

Material providers that process Customer Personal Data are listed at /legal/subprocessors when that inventory is published. Vendor security and privacy review should be proportionate to the provider and data risk.

Customers are notified of qualifying Personal Data Breaches as required by the Data Processing Addendum and applicable law.

Security concerns should be reported to security@demandtrail.com.