An ABM solution you can trust

• Lead data, when uploaded to Madison Logic Customer, has business card information (first/last name; job title; email; phone number; company name; region (country/state)). Internally this data is stored for a period of 1 year before it is deleted from within Madison Logic. This data, devoid of business card information, is aggregated anonymized and generalized to determine campaign effectiveness and characteristics. Client details and lead or contact details are completely stripped away from such aggregation.
• Account data: your Platform account data and other electronic identification data such as IP address and the data you add to your account such as your password, date of birth, gender and other information you share with us. We also monitor behavioral data online and mobile collected through cookie tracking technologies

• Amazon Web Services, Inc. – AWS Cloud Computing Services
• Domo, Inc – Domo Platform
• Okta, Inc. – Okta Platform Services
• Snowflake Inc. – Cloud Data Platform
• Atlassian – Bitbucket Cloud
• Citrix Systems, Inc. – ShareFile
• Towerdata – Email Validation

• Madison Logic stores your CRM data in the United States, in the state of Virginia, within the Amazon Web Services region us-east-1.

• Madison Logic employs TLS protocols with up to 256-bit encryption to protect client authentication, authorization and file transfers (data in transit). 
• Your data is secured at rest by encrypting it using AWS Key Management Service APIs. AWS KMS uses the Advanced Encryption Standard (AES) algorithm in Galois/Counter Mode (GCM), known as AES-GCM. AWS KMS uses this algorithm with 256-bit secret keys.

• Data that contains personal information is reviewed and purged according to a pre-defined schedule based on the expiration of any legitimate business use of the data, or other legal requirements to retail the data for compliance reasons.
• Data for Content Syndication is maintained for 12 months, and 90 days for Display Advertising.

Access to your data is programmatically restricted by customer via a third-party authentication & entitlements service (Okta).

Yes. We can ensure that your content is securely removed from Madison Logic systems. Contact us for more information.

• Madison Logic maintains Business Continuity and Disaster Recovery plans which are regularly tested and reviewed for readiness. 
• All scoped data are hosted and managed through various cloud providers which each have their own business continuity plans.

• Madison Logic has the appropriate resources and staff who are dedicated to ensuring Security is a top concern and we have put forth the appropriate processes and measures to ensure such. The Technical Operations team, including the Director, CTO, Security and Devops Engineers, and our IT staff are all involved in the aspects of our physical and virtual security. 
• Madison Logic has a dedicated Security Operations team who monitor and respond to security and data privacy incidents.

Madison Logic continuously educates its employees about the risks around Security and Privacy breach and encourages a shared responsibility across the organization. We work with a Security Training partner to provide yearly trainings around security and privacy awareness, such as GDPR, CCPA, Phishing, and Secure Coding best practices. We also perform monthly phishing simulations to maintain awareness within the organization.

• Madison Logic’s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Services (AWS) technology.  Amazon’s data center operations have been accredited under: ISO 27001, SOC 1 and SOC 2, PCI Level 1, FISMA Moderate, Sarbanes-Oxley (SOX)
• Madison Logic holds a SOC 2 Type 2 certification performed under AT-C 105 and AT-C 205 by an independent auditor as of September 12th, 2022. A copy of the Madison Logic SOC 2 report can be made available to our clients (under NDA).

• Madison Logic utilizes SAML SSO for authentication with the Madison Logic Platform.
• Federation with client SAML Identity Providers is available as of October 2022

Yes: SSN Trace & Associated Counties; Miscellaneous Court Records; Domestic Watch List Search; 7-Year County Criminal Court Search; National Criminal Databases Search; 7-Year County Criminal Court Search; Employer Verification

Yes. All new hires sign a Confidentiality Agreement as part of their onboarding process before starting with ML

Yes. The Madison Logic Code of Conduct Policy, Acceptable Use Policy, Confidentiality Policy, and Data Protection Policies are included in the Employee Handbook and is also presented to all contractors who are bound to follow the policies as written.

Madison Logic continually vets all vendors and third-party suppliers through our vendor risk management program.

Yes. The Madison Logic IT Security Policy & Privacy Policy is referenced in the Employee Handbook and is also presented to all contractors who are bound to follow the policies as written.

• Madison Logic performs regular patch management and remediation of vulnerabilities on the Madison Logic Platform.
• Madison Logic works internally and with third parties to run penetration tests on Madison Logic Platform, and its source code, to search for and remediate vulnerabilities.

We have a documented Incident Response Plan which is updated and tested regularly so that we can methodically respond to and manage potential security incidents.