Your data, protected at every step

furball handles the data your sales, marketing and RevOps teams rely on. We protect it with strong identity controls, encryption, enterprise-only AI and approvals before anything reaches HubSpot.

Built into furball

Control over who does what

Governance is part of the product. In furball Data Ingestion Studio, every portal has its own access list, every role is enforced on the server, and imports wait for the right person to approve them.

Secure sign-in
Sign in with Microsoft Entra ID, and connect HubSpot portals through HubSpot OAuth, so no HubSpot passwords are ever shared.
Access by portal and role
Grant access to each portal by email. Roles are enforced by the server, not just hidden in the interface.
Approval before import
Restricted users can prepare files, while their downloads, HubSpot imports or both wait for an approver. Imports never start unconfirmed.
Enterprise AI only
AI features use enterprise services, never consumer accounts. Studio AI stays off until you enable it, and your data never trains models.

See roles and approvals in the Studio

How Cat Media works

Security in everyday operations

The team behind furball follows the same standards it builds into the product, from identity and devices to how documents are stored and shared.

Least-privilege access
Team roles and permissions follow the principle of least privilege, so each person can reach only the data their work requires.
Identity and MFA
Microsoft Entra ID with Conditional Access governs every sign-in, with multi-factor authentication on by default and passwordless options.
Zero Trust connections
Cloudflare Zero Trust checks identity, device posture and context before granting access, without relying on VPNs or open firewalls.
Encryption everywhere
Data is encrypted in transit with TLS and at rest with AES, across our cloud services, workstations and mobile devices.
Managed devices
Devices run supported, up-to-date software, protected by BitLocker, TPM and Secure Boot or by Apple's Secure Enclave.
Resilient storage
Documents live in SharePoint with versioning, auditing, backup and recovery, and data is mirrored up to three times.

Compliance roadmap

Working towards independent assurance

We’re working towards ISO/IEC 27001 certification, a SOC 2 report, and independently assessed GDPR and HIPAA compliance, with all four targeted by the end of 2026.

  • In progress

    ISO/IEC 27001

    Certification of our information security management system, covering how we assess risk and manage access, suppliers and incidents.

    Target: end of 2026

  • In progress

    SOC 2

    An independent auditor's SOC 2 report on the design and operation of the security controls behind furball and our services.

    Target: end of 2026

  • In progress

    GDPR

    We already process personal data under the EU and UK GDPR. We're formalising this with an independent assessment of our programme.

    Target: end of 2026

  • In progress

    HIPAA

    Safeguards aligned with the HIPAA Privacy and Security Rules, so we can support healthcare teams working with protected health information.

    Target: end of 2026

These certifications and assessments aren’t held yet. Until they are, we rely on the controls on this page, our data processing commitments, and the independent certifications of the platforms furball runs on, including Microsoft Azure and HubSpot. We’ll update this page as each milestone is reached.

Get started

Questions about security?

Completing a vendor assessment or planning a data project with sensitive records? Tell us what you need, and we'll walk you through our controls and documentation.

Already have access? Sign in to furball Sign in to the Studio