Your customers' data, handled like it's ours
Written for the person who has to sign off on us. No badges we have not earned, no paragraphs that say nothing.
Where your data lives
Our agents work inside your helpdesk.
We do not take a copy of your customer database. Tickets, order data and customer records stay in your professional third-party helpdesk, such as Zendesk or Zoho Desk, under your retention rules and your export controls. These vendors hold independent information-security certifications and support EU (GDPR) requirements.
Our AI tools are optional. If you use them, they run on servers in Germany and use Claude (Anthropic) and GPT (OpenAI) models, which means the conversations they handle leave your helpdesk. Your customer data is never used to train models. Those conversations are kept for three to six months and can be deleted as soon as the engagement ends.
Who can touch it
- Named agents only. No shared logins and no floating pool of anonymous staff on your queue.
- One account per person. Every action in your helpdesk traces back to an individual.
- NDA on file before access. Signed by the agent, not just by the company.
Access is granted per named agent and removed the day that agent leaves your account.
Sub-processors
For this website
These third parties run this website and deliver your messages to us. Support work itself happens inside your own helpdesk, so your helpdesk vendor is not on either list: you already hold that contract.
| Service | Purpose | Region | Data involved |
|---|---|---|---|
| Cloudflare Pages | Website hosting and CDN | Global edge network | Server logs, IP address |
| Google Analytics 4 | Website traffic and content measurement. Consent is requested before loading in the EEA, UK and Switzerland; elsewhere visitors can opt out at any time | United States and other Google regions | Page views, Referrer, Approximate location, Device type, Analytics cookies |
| Resend | Delivering messages sent through the contact form | United States | Name, Email address, Message body |
For our AI tools
If you use our AI tools (AI Agent, AI Quality Inspection and AI Knowledge Base), these model providers are added:
| Service | Purpose | Region | Data involved |
|---|---|---|---|
| Anthropic (Claude) | Language models used by our AI tools | Called from our servers in Germany | Conversation text handled by AI tools |
| OpenAI (GPT) | Language models used by our AI tools | Called from our servers in Germany | Conversation text handled by AI tools |
Paperwork we can sign
- Data Processing Agreement
- We can sign yoursSend it to hello@cxharbor.com and we will route it internally.
- Mutual NDA
- We can sign yours
- Agent-level confidentiality
- We provide a templateEvery agent assigned to your account signs before any access is granted.
What we do not claim
Most vendor trust pages only list what they have. This is the other half, because you will find it out in week three of due diligence anyway.
- SOC 2 Type II
- Not certified todayIf your procurement process requires it, tell us in the first call rather than the last.
- ISO 27001
- Not certified todayIf your procurement process requires it, tell us in the first call rather than the last.
- PCI DSS
- Not certified, and not applicableWe never ask customers for card numbers and never handle cardholder data.
- HIPAA
- Not certified todayWe do not take on accounts where support conversations carry protected health information.
Last reviewed 25 August 2026. Questions this page does not answer go to hello@cxharbor.com, or see the Privacy Policy.
Ready to improve your after-sales?
Tell us about your product and volumes: the first diagnosis is free, and we reply within two business days. Write to hello@cxharbor.com.