Security at CI-Addon

Form submissions and event registrations go directly from the visitor's browser to Microsoft Customer Insights – Journeys. They never pass through our servers or our database. Smart Embed only asks for the visitor's country, and nothing about the visitor is stored. The translation dictionary contains form texts, not personal data, and it is not linked to any customer.

• Application servers: Vercel, EU region (Paris, France)
• Database and authentication: Supabase, EU region (Frankfurt, Germany)
• Scripts: delivered by Cloudflare's global network from cdn.ci-addon.com

The country lookup for Smart Embed runs on Vercel's edge network close to the visitor, so that visitors outside Europe are served quickly.

• Microsoft sign-in. Users sign in with their Microsoft work account. CI-Addon has no passwords of its own. Your organisation's Microsoft policies, such as multi-factor authentication and conditional access, apply.
• Separated organisations. Each customer's data is separated with row-level security in the database. A user can only read and change data in their own organisation.
• Roles. Admins invite and remove people, change roles and manage the subscription. Editors work with forms and portals. All admins get an email when someone becomes or stops being an admin, or is removed.
• Protected settings. Subscription, plan and limits can only be changed by our billing system and our administrators, not directly by users.

• All traffic to the app, the CDN and event portals uses HTTPS (TLS).
• The database and stored files are encrypted at rest by our provider.
• The database is backed up daily.
• API keys and other secrets are kept in our hosting provider's encrypted environment settings, never in code.

• All code and database changes are tracked in version control and reviewed before they reach production.
• Database changes are deployed as versioned migrations, never as ad hoc changes in production.
• Only the people at For A Fact who need it have access to production systems.
• Automatic monitoring checks customer forms every day and alerts the customer if a form stops working.

Payments are handled by Stripe (PCI DSS Level 1). We never see card numbers.

The full list of sub-processors is in our Data Processing Agreement. Answers to common questions are in our Help Center.

When a subscription ends, the organisation's scripts are paused after 14 days, and all data is permanently deleted after 90 days, unless the customer buys again before then. See our Terms of Service.

If you believe you have found a security issue in CI-Addon, email support@ci-addon.com. Please give us reasonable time to fix it before you disclose it. We will reply quickly and keep you informed.