Our commitment to
data security

We only collect the data needed to power your dashboards and automations. When you connect an integration, MSPbots pulls data based strictly on the API permissions you grant, so you stay in control of exactly what's shared. Your data is used solely to generate insights and drive the apps that help your team work more efficiently. They are never sold, shared with third parties, or used outside the scope of your account.As a data-driven process automation company, we collect all kinds of data from various integrations based on your API permission for the integration. This data is necessary for us to generate the dashboard and drive the bots to help you achieve your goals.

We provide you with complete control over your PSA's API permission to give MSPbots access levels that you're comfortable with. You can set up and modify these permissions as needed.

MSPbots has successfully completed a SOC 2 Type II audit, verifying our commitment to the highest standards of security, availability, and confidentiality.

MSPbots servers are located in a SOC 2 Certified Data Center in downtown Chicago, which ensures that we meet industry-standard security and availability requirements. We are planning to add new data centers in the EU and AU once we have enough clients in those areas.

Our data center is equipped with an enterprise-grade firewall with proactive intrusion prevention and an isolated network. All inbound access is blocked except for ports 443 and 80, which ensures that your data is protected from external threats.

All MSPbots servers are updated weekly with the latest patches to prevent security breaches. We use 2FA control for server access to prevent unauthorized access, and enforce a strict password policy across all servers, including mandatory periodic password resets and automatic account lockout after repeated failed login attempts.

Only key employees in the USA who have undergone background checks have direct access to our production server. General programmers can access the development server environment, where testing data is available.

We have a Hot Spare duplication in place for server failover, and a Cold Backup with instant recovery that can be up and running within 10 minutes. We also have an Offsite Datacenter back in Microsoft Azure that can spin up within 30 minutes in case of a data center disaster.

We continuously scan and certify our servers for PCI DSS compliance, certified by Forte Payment System. This ensures that our servers meet industry-standard security requirements.

Most MSP situations don’t require storing PHI, but when we do, we ensure that it is protected with a password that MSPbots doesn’t have access to. PHI information should not be added to your PSA.

We do not share any data with people outside MSPbots without proper authorization from the MSP who owns the data.

MSPs have the option to delete all their data if they choose to.

We have a Bug Bounty Program that rewards white-hat hackers who identify bugs in our system.

We have a GDPR Data Processing Agreement to ensure that our clients’ data is processed in compliance with GDPR regulations.