Security & privacy
Your customers trust you. We designed for that.
Data minimisation, isolation and auditability are design rules across every product — not settings you have to find.
Data stays where it belongs
On-premises & air-gapped
BzAnalytics runs entirely inside your network. No required external calls, no telemetry unless you opt in.
Seoul-region cloud
BzTalk messaging infrastructure runs in the AWS Seoul region (ap-northeast-2).
Tenant isolation
Every query is scoped to the organisation and workspace it belongs to.
Minimal personal data
Cookieless analytics
No raw IP or User-Agent stored. Visitor IDs are hashes with a daily salt that is destroyed.
Hashes, not originals
Ad-platform audiences receive hashes only. API keys and tokens are never stored in the original.
Consent, every time
Consent is checked before each send and again at every fallback step. Promotional sends respect quiet hours.
Control & accountability
Access control
Team roles, scoped API keys and two-factor authentication.
Audit logs
Privileged and data-access actions are recorded, including administrator access to a tenant.
Governed AI
Approval before action, a data guard before external AI and a log of every AI call.
Security review or questionnaire?
We support security reviews, vendor assessments and on-premises architecture discussions. Contact us and our team will follow up.
The marketing cloud for teams that keep control of their data.