Mobilyze — The Agentic GTM Network

Jump to section ▾

1 Overview
2 Shared responsibility
3 Your tenant
4 Subprocessors
5 Report
6 Documents

1 Security Overview

Mobilyze protects the Platform with the following controls:

Customer data is encrypted at rest and in transit.
Authorization is fail-closed: access is denied unless a policy explicitly allows it.
Activity on the Platform is recorded in audit logs.
We scan for vulnerabilities and track findings as tickets with response targets.
The Platform is hosted on Google Cloud, which secures the datacenters it runs in.

2 Shared responsibility

Shared responsibility: security is shared between Google Cloud, Mobilyze and you. The table shows who is responsible for each area.

Area	Google Cloud	Mobilyze	Customer
Physical datacenter	Secures the datacenter facilities and hardware that host the Platform.	Relies on Google Cloud for physical security.	Not applicable.
Network and platform	Operates and secures the underlying cloud infrastructure.	Configures the cloud services the Platform runs on and encrypts data in transit.	Connects to the Platform over HTTPS.
Application	Not applicable.	Builds and maintains the Platform, scans for vulnerabilities and tracks remediation tickets against response targets.	Keeps its own browsers and devices up to date.
Identity and access	Provides identity controls for the cloud environment.	Enforces fail-closed authorization, so access is denied unless a policy allows it.	Manages its users, groups and roles, and turns on multi-factor authentication.
Data	Provides storage services.	Encrypts customer data at rest and in transit.	Decides what data to contribute and who in its organization can see it.
Integrations	Not applicable.	Records audit logs of activity on the Platform.	Chooses which third-party integrations to connect and the scopes they receive.

3 Securing your Mobilyze tenant

Securing your Mobilyze tenant is a responsibility you share with us. We recommend the following:

Turn on multi-factor authentication (MFA) for every user.
Review user roles and group membership quarterly.
Remove users promptly when they leave your organization.
Review connected integrations and the scopes they hold.
Export the audit trail to keep your own record of activity.

4 Subprocessors

The third parties that process data on our behalf are listed on our Sub-processors page.

5 Reporting a vulnerability

If you believe you have found a security vulnerability, please follow our vulnerability disclosure policy.

6 Requesting security documents

Customers and prospects can request our security questionnaire responses (CAIQ) and security policies under a non-disclosure agreement. Request the security package.