Dotdigital Trust Center
We empower our customers to drive value in every digital interaction with a relationship based on integrity, trust, and confidence.
Transparency is our policy
As marketers ourselves, we understand the importance of trust when sharing your most valuable asset: your customer data. That’s why we’ve invested heavily in technology and resources to make security and privacy foolproof. We believe in transparency, giving you all the information needed to use Dotdigital confidently. Our promise is simple: your satisfaction comes first. We’re here to listen, take accountability, and deliver solutions that exceed expectations.
Security at our core
t Dotdigital, we take your security—and ours—seriously. We’ve implemented robust measures to keep your data safe, including an ISO 27001-certified Information Security Management System (ISMS) that identifies and manages risks to confidentiality, integrity, and availability. Our management-approved Information Security Policy is available for your reference.
For queries, contact our dedicated security team at security@dotdigital.com. You can also visit dotdigitalstatus.com for real-time system updates and for historical availability by region or service function.
-
ISO 27001 certification
Our ISMS is ISO 27001 certified, audited by Alcumus ISOQAR. Validate our certificate by searching number 18479.
Cyber Essentials PlusDotdigital is Cyber Essentials Plus certified, proving strong protection against cyber threats. Search Dotdigital on the NCSC site.
Security measuresWe’ve listed the technical and organizational security measures we use to keep your data secure.
Privacy, data protection, and compliance
Dotdigital builds on its ISO 27001 certification with ISO 27701 for privacy information management, audited by Alcumus ISOQAR, a UKAS-accredited body. Our Privacy Information Management System and compliance programs are overseen by our appointed Data Protection Officer (DPO), who can be reached at privacy@dotdigital.com.
We maintain GDPR-specific data processing agreements and EU Model Clauses with subsidiaries and service providers. A full list of partners is available in the Service Partners section. Find further information about our Terms of Service, data processing addendum, and helpful GDPR resources and FAQs here.
How your data is stored
Dotdigital uses trusted cloud service providers to deliver secure, scalable, and responsive solutions. To protect confidentiality, integrity, and availability, we only partner with industry-leading providers operating state-of-the-art facilities. All contracts include strict security requirements, GDPR-specific data processing agreements, and EU Model Clauses.
Our infrastructure is hosted on Microsoft Azure and Google Cloud Platform. Depending on your account location, data is stored in one of several designated regions to ensure compliance and performance.
Where your data is stored
-
EU region
The EU region utilizes the Microsoft Azure North and West Europe facilities and Google’s Europe region.
US regionThe US region utilizes the Microsoft Azure Central US and East US 2 facilities, plus Google’s Americas region.
Australia regionThe Australia region utilizes the Microsoft Azure Australia East and South East facilities, as well as Google’s Sydney facility.
CPaaS and legacy SMS platformsCustomers using our CPaaS and legacy SMS platforms will have data stored in the Microsoft Azure North Europe, West Europe, and & UK South facilities.
Personalization platformsCustomers using our Fresh Relevance platform or the Dotdigital Advanced Personalisation Pack will have data stored in the Microsoft Azure Sweden Region.
Our use of AI
Dotdigital’s Winston AI designed to help you do more with your data while maintaining trust and transparency. We clearly indicate when AI is being used and explain how data interacts with AI systems. You remain in control—enabling generative AI features is always your choice. We work to ensure our AI-enabled features avoids bias, respects rights, and prioritizes safety. Learn more about our safegaurds.
Environment and sustainability
Dotdigital is committed to reducing environmental impact and promoting sustainable practices. We operate an ISO 14001-certified Environmental Management System, audited by Alcumus ISOQAR.
Our platform runs on infrastructure powered by 100% renewable energy, and we offset all measured Scope 1 and 2 emissions plus selected Scope 3 emissions (including business travel, remote workers, employee commuting, major cloud infrastructure providers, data centers, and transmission and distribution losses), making us carbon neutral.
We champion initiatives like Cycle to Work, public transport loans, and volunteer days. Learn more about our Environmental Policy.
Service Partners
Local services, global partners
-
Microsoft Azure
For the provision of the Dotdigital service, including storage of customer data. Azure conforms to many international and industry-specific compliance standards. More information can be found on Azure’s Trust Center. Microsoft uses 100% renewable energy and has been carbon neutral since 2012. More information can be found on Microsoft’s “Climate” page. -
GoogleCloud Platform
For the provision of the dotdigital service including storage of customer data. Google conforms to many international and industry-specific compliance standards. More information can be found on Google Cloud Platform’s Security page. Google uses 100% renewable energy, has been carbon neutral since 2007, and has conformed to ISO 50001 since 2013. More information can be found on Google’s sustainability page. -
Cloudflare
For Content Delivery Network (CDN) and web proxy services. More information can be found on Cloudflare’s Privacy & Security page. Cloudflare uses 100% renewable energy and has been carbon neutral since 2018. More information can be found on Cloudflare’s “The Climate and Cloudflare” blog post. -
Amazon Web Services
For provision of supporting network services and client image storage. AWS conforms to many international and industry-specific compliance standards. More information can be found on AWS’s compliance page. We only use AWS servers running on 100% renewable energy. More information can be found on AWS’s sustainability page. -
MagneticOne
Suppliers of integration platforms for clients wanting to link their Dotdigital account to supported third party e-commerce systems. -
Elasticsearch
Used in the processing and storing of system logs. -
Raygun
Used in the processing and storing of system logs. -
Partner Hero
Multi-lingual support by livechat, email and telephone. -
CrescoData
Suppliers of integration platforms for clients wanting to link their dotdigital account to supported third party e-commerce systems. -
tray.ai
Suppliers of integration services to third party systems -
ClickHouse
For the provision of analytics and data management services
-
Microsoft Azure
For the provision of the Dotdigital service, including storage of customer data. Azure conforms to many international and industry-specific compliance standards. More information can be found on Azure’s Trust Center. Microsoft uses 100% renewable energy and has been carbon neutral since 2012. More information can be found on Microsoft’s “Climate” page. -
Google Cloud Platform
For the provision of the dotdigital service including storage of customer data. Google conforms to many international and industry-specific compliance standards. More information can be found on Google Cloud Platform’s Security page. Google uses 100% renewable energy, has been carbon neutral since 2007, and has conformed to ISO 50001 since 2013. More information can be found on Google’s sustainability page. -
Cloudflare
For Content Delivery Network (CDN) and web proxy services. More information can be found on Cloudflare’s Privacy & Security page. Cloudflare uses 100% renewable energy and has been carbon neutral since 2018. More information can be found on Cloudflare’s “The Climate and Cloudflare” blog post. -
Amazon Web Services
For provision of supporting network services and client image storage. AWS conforms to many international and industry-specific compliance standards. More information can be found on AWS’s compliance page. We only use AWS servers running on 100% renewable energy. More information can be found on AWS’s sustainability page. -
MagneticOne
Suppliers of integration platforms for clients wanting to link their Dotdigital account to supported third party e-commerce systems. -
Elasticsearch
Used in the processing and storing of system logs. -
Raygun
Used in the processing and storing of system logs. -
Partner Hero
Multi-lingual support by livechat, email and telephone. -
CrescoData
Suppliers of integration platforms for clients wanting to link their dotdigital account to supported third party e-commerce systems. -
tray.ai
Suppliers of integration services to third party systems -
ClickHouse
For the provision of analytics and data management services
-
Microsoft Azure
For the provision of the dotdigital service, including storage of customer data. Azure conforms to many international and industry-specific compliance standards. More information can be found on Azure’s Trust Center. Microsoft uses 100% renewable energy and has been carbon neutral since 2012. More information can be found on Microsoft’s “Climate” page. -
Google Cloud Platform
For the provision of the dotdigital service including storage of customer data. Google conforms to many international and industry-specific compliance standards. More information can be found on Google Cloud Platform’s Security page. Google uses 100% renewable energy, has been carbon neutral since 2007, and has conformed to ISO 50001 since 2013. More information can be found on Google’s sustainability page. -
Cloudflare
For Content Delivery Network (CDN) and web proxy services. More information can be found on Cloudflare’s Privacy & Security page. Cloudflare uses 100% renewable energy and has been carbon neutral since 2018. More information can be found on Cloudflare’s “The Climate and Cloudflare” blog post. -
Amazon Web Services
For provision of supporting network services and client image storage. AWS conforms to many international and industry-specific compliance standards. More information can be found on AWS’s compliance page. We only use AWS servers running on 100% renewable energy. More information can be found on AWS’s sustainability page. -
MagneticOne
Suppliers of integration platforms for clients wanting to link their Dotdigital account to supported third party e-commerce systems. -
Elasticsearch
Used in the processing and storing of system logs. -
Raygun
Used in the processing and storing of system logs. -
Partner Hero
Multi-lingual support by livechat, email and telephone. -
CrescoData
Suppliers of integration platforms for clients wanting to link their dotdigital account to supported third party e-commerce systems. -
tray.ai
Suppliers of integration services to third party systems -
ClickHouse
For the provision of analytics and data management services
Our Industry Memberships