Skip to main content

​
Access Management

CustomerOS has 3 types of user access management: our own, 3rd party SSOs and BYO (using OpenID Connect). The most basic way of logging into CustomerOS is to provide your email and CustomerOS sends you a one-time unique login link.

​
2. SSO with Google & Microsoft

To enable SSO reach out to support and we will get you set up!
The recommended way of logging into CustomerOS is to use Google’s and Microsoft’s SSO feature, so that you can easily import your customer data to CustomerOS. This method also inherits the security related to your Google or Microsoft account, such as 2FA or biometric security, so if you lose access or control of your account you can manage the security of your customer data in one place.

​
3. OpenID Connect

To enable OpenID Connect reach out to support and we will get you set up!
Finally we also support OpenID Connect as a user access management standard. We support self-hosted, open source solutions such as KeyCloak amongst others. To enable for your workspace, first create a workspace either using a Magic Link or Google/Microsoft SSO for an email address that has the same domain as you use for OpenID Connect. Once this is done then reach out to support with the following information:
  1. Discovery URL
  2. Client ID
  3. Client Secret
We will update your workspace which will change the magic link login into an OpenID Connect for the domain you specify.
If you require additional login security such as 2FA or other SSO/SAML providers, please reach out.

​
Compliance

​
GDPR

CustomerOS is fully compliant with GDPR. Any data removal request is possible both within your workspace and within CustomerOS as a whole. You can find more information on our web tracker’s page regarding it’s specific compliance with GDPR.
Reach out to support if you require more information on how CustomerOS helps you remain GDPR compliant, or if you have a data removal request that we can help with as part of your, or your users rights under EU and UK law.

​
Certifications

​
CASA Type 2 (Google Security Certification)

As we provide tight integrations with Google, we are audited and certified by the CASA security standard. We are recertified on a yearly basis, and this certification includes code vulnerability scanning.

​
3rd Party Data Processors

As a European-based company, we pride ourselves on our data security and confidentiality. All data is stored encrypted and any data that leaves our own servers and applications goes to vendors that have been vetted for their own data security policies, processes and overall data safety. For more information on which 3rd parties we work with to provide you a better experience, find more information in our Data Processing Agreement.