ClickUp has one of the strictest policies in our industry to ensure your data never gets into the hands of third parties.
Keeping our clients' data secure is the absolute top priority at ClickUp. Our goal is to provide a secure environment, while also being mindful of application performance and the overall user experience. Read our full public security policy here: https://clickup.com/security
ClickUp is hosted entirely on Amazon Web Services (AWS), providing a built-in suite of security and privacy features. Our team takes additional proactive measures to ensure a secure infrastructure environment.
For additional, more specific details regarding AWS security, please refer to https://aws.amazon.com/security/.
Data Center Security
AWS maintains an impressive list of reports, certifications, and third-party assessments to ensure complete and ongoing state-of-the-art data center security. They have many years of experience in designing, constructing, and operating large-scale data centers.
AWS infrastructure is housed in Amazon-controlled data centers throughout the world. Only those within Amazon who have a legitimate business need to have such information know the actual location of these data centers, and the data centers themselves are secured with a variety of physical controls to prevent unauthorized access. It is safe to say Amazon is much better at physical security than we are capable of being, so we leave it to them.
ClickUp's infrastructure is hosted in a fully redundant, secured VPN environment, with access restricted to operations support staff only. This allows us to leverage complete firewall protection, private IP addresses, and other security features.
All ClickUp web application communications are encrypted over TLS 1.2, which cannot be viewed by a third party. This is the same level of encryption used by banks and financial institutions.
ClickUp maintains ongoing PCI DSS compliance. When you use a credit card to pay for ClickUp, you can be confident that ClickUp is abiding by stringent industry standards for storing, processing, and transmitting credit card information online.
ClickUp actively monitors ongoing security, performance, and availability 24/7/365. We run automated security testing on an ongoing basis. We also contract an independent third party for penetration testing.