Filum Trust Center
Contact usSecurity and privacy at Filum
Filum processes your customers' data on your behalf, under Vietnam's Personal Data Protection Law. Our information security management system is certified to ISO/IEC 27001:2022.
Compliance
ISO 27001
ISO/IEC 27001:2022
Certificate VN-10121-ISMS · Filum One-Member Company Limited · issued by SMG, valid until 31 Aug 2029
Verify →PDPL
Personal Data Protection Law No. 91/2025/QH15
Vietnam
356
Decree No. 356/2025/ND-CP
Implementing the PDPL
116
Law on Cybersecurity No. 116/2025/QH15
Vietnam
Data we process
- End-customer names, phone numbers, emails and channel IDs (Zalo, Facebook…)
- Conversation content (chat, email, voice transcripts) from connected channels
- Interaction, usage and purchase history
- Ratings, feedback and Voice of Customer survey responses
- Data from integrations you turn on (Zalo, Messenger, WhatsApp, email, CRM)
Controls
Data protection
- Encryption at rest (AES-256)
- Encryption in transit (TLS 1.2 or higher)
Access control
- Multi-factor authentication, mandatory for admins and all production access
- Single sign-on via SAML 2.0 and OAuth 2.0
AI and your data
- Customer data is never used to train or fine-tune any AI model, ours or a third party's
- Training opt-out enabled with every AI provider; data is used only for inference
Organizational security
- NDA and data protection commitment signed by all staff with data access
- Regular personal data protection training for all staff
Incidents and retention
- Breach notice to customers within 48 hours of confirming a breach
- Incident response times from 15 minutes for the most severe incidents
Enterprise plan
- 99.9% uptime commitment
- Dedicated infrastructure (optional)
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Cloud infrastructure (compute, storage, networking, identity) | Singapore (asia-southeast1) |
| MongoDB Atlas | Primary database of the Platform | Singapore (on GCP) |
| Amazon Web Services | CDN for static assets (non-personal data) | Global (CloudFront) |
| Microsoft Azure OpenAI Service | Natural language processing, generative AI | Singapore |