{"id":10841,"date":"2026-04-08T14:33:42","date_gmt":"2026-04-08T07:33:42","guid":{"rendered":"http:\/\/staging1.corporate.plugilo.com\/knowledge-hub\/security-and-reliability-2\/"},"modified":"2026-06-30T15:31:52","modified_gmt":"2026-06-30T08:31:52","slug":"plugilo-security-and-reliability","status":"publish","type":"ht_kb","link":"https:\/\/staging1.corporate.plugilo.com\/de\/knowledge-hub\/plugilo-security-and-reliability\/","title":{"rendered":"Security and Reliability"},"content":{"rendered":"\n<div class=\"wp-block-file\"><a id=\"wp-block-file--media-ef497b2a-cfa2-49d5-a6f0-5895fb110262\" href=\"https:\/\/staging1.corporate.plugilo.com\/wp-content\/uploads\/2026\/04\/plugilo-security-and-reliability-en-2026-0208.pdf\">plugilo-security-and-reliability-en-2026-0208<\/a><a href=\"https:\/\/staging1.corporate.plugilo.com\/wp-content\/uploads\/2026\/04\/plugilo-security-and-reliability-en-2026-0208.pdf\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-ef497b2a-cfa2-49d5-a6f0-5895fb110262\">Download<\/a><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Our mission: Trust and quality<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Welcome to plugilo! Our platform is designed to enable an inspiring, secure and efficient exchange of product information and any kind of information between end customers and partner customers (manufacturers, retailers, influencers and other platforms). We stand for content that is relevant, high-quality and trustworthy. To ensure this, we have developed guidelines that are based on the strictest global standards and are binding on all users. These rules apply to all generated cards, bundled stacks, comments, chats and any form of communication on the platform, regardless of whether the plugilo app, the plugilo portal, plugilo widgets or a third-party connection are used for this purpose.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">1. Our Commitment<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo, Inc. (\u201cplugilo\u201d) is committed to maintaining commercially reasonable technical and organizational measures designed to protect the confidentiality, integrity, and availability of its systems and the data processed therein. This page provides an overview of plugilo\u2019s security<br>and reliability practices and may be referenced by Plugilo\u2019s contractual agreements, policies, and other documentation.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2. Scope<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The practices described on this page apply to plugilo\u2019s proprietary cloud-hosted solutions, related support services, professional services, and any data processed in connection therewith (collectively, the \u201cServices\u201d). Where plugilo\u2019s contractual agreements with customers, partners, or other parties reference this page, the information provided herein forms part of the applicable contractual framework as specified in the respective agreement.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">3. Confidentiality<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.1 Physical Access Controls<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo implements measures to prevent unauthorized physical access to data processing facilities, including:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Automated access control systems for all facilities housing data processing infrastructure<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use of security locks and restricted-access zones<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Visitor policies requiring escort by authorized personnel at all times<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Careful vetting and selection of maintenance and cleaning staff<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Policies governing remote work environments, including the requirement to work in dedicated, separated workspaces where feasible and the prohibition of working on confidential matters in publicly accessible locations<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.2 System Access Controls<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo employs the following measures to prevent unauthorized access to its data processing systems:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.3 Data Access Controls<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To ensure that only authorized personnel can access personal and confidential data, plugilo maintains:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Role-based access control applying the principle of least privilege<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logging and auditing of access to applications, including creation, modification, and deletion of data Minimization of administrator-level accounts<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Secure storage of all data carriers<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Centralized administration of user rights by designated system administrators<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Policies limiting the printing and physical reproduction of data to what is strictly necessary<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.4 Separation of Processing<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo ensures that data collected for different purposes is processed separately through:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Physically and logically separated storage on distinct systems or data carriers<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Strict separation of production and test\/development environments<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">4. Integrity<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.1 Transfer Controls<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo ensures that data cannot be read, copied, altered, or removed without authorization<br>during electronic transfer or storage, and that it is possible to verify recipients of data transfers.<br>Measures include:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use of VPN tunnels for site-to-site and remote connections<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Encrypted wireless networks (WPA2 or higher with strong credentials)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logging of all data access and retrieval activities<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Provision of data exclusively through encrypted channels (e.g., SFTP, HTTPS\/TLS)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Maintenance of records of regular data retrieval and transmission processes<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use of anonymization or pseudonymization where appropriate when transferring data<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.2 Input Controls<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo maintains the ability to verify who has processed data, at what time, and in what manner<br>through:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logging of data entry, modification, and deletion events<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Manual and automated review of audit logs<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Traceability of all data changes to individual user accounts (not group accounts)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Clear assignment of responsibilities for data deletion processes<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">5. Availability and Resilience<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo ensures that data cannot be read, copied, altered, or removed without authorization<br>during electronic transfer or storage, and that it is possible to verify recipients of data transfers.<br>Measures include:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Physical safeguards: Fire extinguishing equipment, fire and smoke detection systems, and surge protection in server rooms; no sanitary installations located in or above server rooms.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Power continuity: Uninterruptible power supply (UPS) systems<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data redundancy: RAID systems and disk mirroring for critical storage<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Backup and recovery: Regular backups pursuant to a documented backup and recovery plan, with monitoring of backup processes and regular testing of data restoration procedures (results documented)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Disaster recovery: Documented emergency and disaster recovery plans aligned with recognized standards<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">System architecture: Separation of operating systems and data layers to limit the impact of incidents<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">6. Ongoing Review, Assessment, and Evaluation<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.1 Data Protection Management<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo maintains an organizational framework to meet applicable data protection requirements, including:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use of a dedicated data protection management platform<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Appointment of a qualified Data Protection Officer<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employee confidentiality obligations and regular data protection training<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Maintenance of a record of processing activities in accordance with applicable law<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.2 Incident Response Management<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo maintains documented processes for responding to security and data protection incidents, including:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Defined notification procedures for data breaches directed at supervisory authorities and affected individuals, in accordance with applicable legal requirements<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Involvement of the Data Protection Officer in all security incidents and data breaches<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Deployment of anti-virus software and firewall systems as part of the incident prevention and detection infrastructure<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.3 Privacy by Design and by Default<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo integrates privacy considerations into the design and operation of its systems:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employee training on privacy by design and privacy by default principles<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data minimization: only data that is necessary for the specific processing purpose is collected and processed<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.4 Subprocessor and Vendor Controls<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo ensures that data processed on its behalf by subprocessors is handled in accordance<br>with documented instructions:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Written data processing instructions to all subprocessors (e.g., through data processing agreements)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Verification of data destruction upon termination of subprocessor engagements<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Requirement that subprocessors obligate their own employees to data confidentiality<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Careful selection of subprocessors with particular regard to data security capabilities<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ongoing monitoring and review of subprocessor activities and compliance<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">7. Cloud Infrastructure and Hosting<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo\u2019s Services are hosted on commercially recognized cloud infrastructure providers. plugilo selects providers that maintain robust security programs and evaluates their technical and organizational safeguards as part of its vendor management process. Where available, plugilo reviews providers\u2019 independent audit reports and certifications as part of this evaluation. plugilo itself does not currently hold ISO 27001 or SOC 2 certifications. plugilo\u2019s security program is based on commercially reasonable industry practices and is subject to ongoing<br>internal review and improvement.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">8. U.S. Market \u2013 Additional Information<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.1 U.S. Data Privacy<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo processes data in accordance with applicable U.S. federal and state privacy laws, including, where applicable, the California Consumer Privacy Act (CCPA\/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and other state-level data protection statutes. plugilo maintains internal procedures to respond to consumer rights requests (e.g., access, deletion, opt-out of sale) where required by applicable law.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.2 Data Location<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data may be stored and processed in data centers located in the United States. Where data is transferred internationally, plugilo ensures that appropriate safeguards are in place in accordance with applicable data protection laws.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.3 U.S. Export Controls and Sanctions Compliance<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo maintains controls designed to comply with applicable U.S. export control and sanctions laws, including the Export Administration Regulations (EAR) and programs administered by the Office of Foreign Assets Control (OFAC). Access to the Services is not permitted from<br>U.S.-embargoed destinations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.4 Industry-Specific Requirements<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo\u2019s Services are designed as general-purpose commercial software. Customers operating in regulated industries (e.g., healthcare, financial services) are responsible for evaluating whether the Services meet their specific regulatory requirements. plugilo is available to discuss additional safeguards or contractual commitments on a case-by-case basis.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">9. European Market \u2013 Additional Information<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.1 GDPR Compliance<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where plugilo processes personal data subject to the General Data Protection Regulation (EU) 2016\/679 (\u201cGDPR\u201d), plugilo implements technical and organizational measures in accordance with Art. 32 GDPR. Details regarding Plugilo\u2019s data processing practices and the availability of a Data Processing Addendum are described in the applicable contractual agreement or may be requested at the contact address below.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.2 International Data Transfers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where personal data is transferred from the European Economic Area, Switzerland, or the United Kingdom to countries outside these jurisdictions, plugilo ensures that appropriate transfer mechanisms are in place, such as Standard Contractual Clauses or other legally<br>recognized safeguards.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">10. Continuous Improvement<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">plugilo regularly reviews and updates its security and reliability measures to account for evolving threats, changes in technology, and developments in applicable legal and regulatory requirements. Updates to this page will be reflected by the \u201cLast Updated\u201d date above.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">11. Questions and Contact<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">For questions regarding Plugilo\u2019s security and reliability practices, please contact:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Plugilo, Inc. Email: legal@plugilo.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This page is provided for informational purposes and may be referenced by plugilo\u2019s contractual agreements, policies, and other documentation. In the event of any conflict between this page and the terms of an applicable agreement between plugilo and a customer or partner, the terms of such agreement shall prevail.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Our mission: Trust and quality Welcome to plugilo! Our platform is designed to enable an inspiring, secure and efficient exchange of product information and any kind of information between end customers and partner customers (manufacturers, retailers, influencers and other platforms). We stand for content that is relevant, high-quality and trustworthy. To ensure this, we have [&hellip;]<\/p>\n","protected":false},"author":7,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"ht-kb-category":[123],"ht-kb-tag":[],"class_list":["post-10841","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-recht-compliance"],"acf":[],"_links":{"self":[{"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/ht-kb\/10841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/comments?post=10841"}],"version-history":[{"count":2,"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/ht-kb\/10841\/revisions"}],"predecessor-version":[{"id":14668,"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/ht-kb\/10841\/revisions\/14668"}],"wp:attachment":[{"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/media?parent=10841"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/ht-kb-category?post=10841"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/staging1.corporate.plugilo.com\/de\/wp-json\/wp\/v2\/ht-kb-tag?post=10841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}