New RGM Academy course: Promotional Effectiveness 👉 Out Now
Home / IT Security & Compliance
Last Update: November 2026
Buynomics is cloud-native SaaS hosted on AWS in the EU. Each client's data and model are logically isolated, Virtual Shoppers AI contains no personal data, and access to Buynomics is role-based. Detailed Buynomics security documentation (architecture, technical and organizational measures, Data Processing Agreement) is shared during an evaluation.
| Buynomics security area | Commitment |
|---|---|
| Hosting | AWS in the EU, disaster recovery in a second EU region |
| Data residency | Client business data stays in the EU |
| Client isolation | Multi-tenant, logical separation per client |
| Encryption | AES-256 at rest, TLS 1.2+ in transit, including backups |
| Identity | SSO via SAML 2.0 and OpenID Connect, MFA, role-based access control |
| Privacy | GDPR compliant, Data Processing Agreement with every client |
| Certifications | SOC 2 and ISO 27001 audits under way; hosting attested under BSI C5 |
| Testing | Independent penetration testing at least once a year |
| Breach notification | Within 48 hours |
| Deployment | SaaS only, web-based, no plugins |
Buynomics is hosted on AWS in the EU, with disaster recovery in a second EU region. Client business data stays in the EU.
Buynomics is a multi-tenant platform with logical separation per client. Buynomics users access one client tenant at a time.
Buynomics runs on AWS today. Deployment on Microsoft Azure, also in the EU, is in preparation for clients who standardize on Azure. Contact Buynomics for availability.
Buynomics is delivered as SaaS only, with no on-premise deployment. Buynomics is web-based, runs in current browsers and needs no plugins.
Buynomics encrypts data with AES-256 at rest and TLS 1.2+ in transit, including backups.
Buynomics supports single sign-on via SAML 2.0 and OpenID Connect, multi-factor authentication and role-based access control.
Buynomics runs continuous security monitoring and threat detection.
Every change to Buynomics is peer reviewed and passes automated security scanning before release.
Buynomics is independently penetration tested at least once a year.
The personal data Buynomics holds is limited to user account and usage data. Virtual Shoppers AI contains no personal data.
Buynomics is GDPR compliant, with an external Data Protection Officer, an internal Information Security Officer and a Data Processing Agreement for every client.
Buynomics is hosted on infrastructure attested under the German BSI C5 catalogue.
Buynomics' SOC 2 and ISO 27001 audits are under way.
Buynomics notifies clients of breaches affecting their data within 48 hours.
Buynomics runs continuous encrypted backups and cross-region disaster recovery, tested at least once a year.
Buynomics' sub-processors are AWS (hosting), Intercom (in-app support) and LogRocket (optional session analytics, US-based). The full list is in the Buynomics Terms and Conditions.
Detailed Buynomics security documentation (architecture, technical and organizational measures, Data Processing Agreement) is shared during an evaluation.
