Information security

Data security and protection
at Datup

We protect your supply chain's critical information through a secure cloud infrastructure, access controls, encryption, and security practices aligned with international standards.

ISO 27001:2022
AWS Cloud Partners

ISO 27001:2022

Information security certifications

AWS

Robust cloud infrastructure

Data Encryption

Data protected in transit
and at rest

AI Security

Data protection in
AI applications

How we protect your data

We protect your
data at every stage

Connection

→

Processing

→

AI

→

Results

Encrypted data

Information protection
during transmission and
storage using
encryption mechanisms.

Controlled access

Access to systems and data is limited through identity mechanisms, permissions, and the principle of least privilege.

Secure infrastructure

Datup operates on AWS cloud infrastructure and incorporates multiple security and monitoring controls.

Traceability

Relevant infrastructure and security activities are logged and monitored.

Leading supply chain teams use Datup to improve their results

Grupo Bimbo
Juan Valdez
Dislicores
Colsubsidio
Crepes & Waffles
Edgewell
Disfarma
Prebel
Dyna
Gabrica

Infrastructure and connectivity

Infrastructure designed to protect business information

Cloud partner

Cloud infrastructure on AWS

Datup uses AWS infrastructure and an architecture designed to control access, protect data, and monitor system activity.

Core controls

AWS KMS

IAM

CloudTrail

GuardDuty

IAM Access Analyzer

Restricted storage access

Secure enterprise connections

Datup supports various integration mechanisms with
enterprise systems, including direct connections and Site-to-Site VPNs
for scenarios requiring private connectivity.

View ERP connections

DATA POLICY

How does Datup use
my data before,
during, and after
our contract?

We share the scope of data processing
and its use in writing as part of the
contractual agreement.

Learn about our data policy

Compliance and governance

Security backed
by processes and controls

Datup security combines technology, processes, and governance to
protect the confidentiality, integrity, and availability of information.

ISO/IEC 27001:2022

Information security management system
and control framework for managing
information-related risks.

Privacy & Data Protection

Policies and procedures for the
processing and protection of
personal data.

Data Governance

Controls for data access, processing,
storage, and lifecycle management.

Security FAQs

Where is my data stored?

Your data is stored on AWS cloud infrastructure operated by Datup, with restricted access to storage services. The specific region and residency conditions are confirmed in each client agreement and detailed in the security documentation.

Icon - Elements Webflow Library - BRIX Templates

How is my data encrypted?

Information is protected through encryption in transit and at rest, with key management via AWS KMS. Details on algorithms and rotation policies are available in the Security Overview.

Icon - Elements Webflow Library - BRIX Templates

How long does it take to implement for a client?

Between 2-4 weeks per client, depending on:
Complexity of data in the ERP
Number of locations/SKUs
Modules contracted (forecast only vs. forecast + inventory + S&OP).

Icon - Elements Webflow Library - BRIX Templates

Can we offer Datup only to selected clients?

Yes, absolutely. Many partners start with a pilot program, offering Datup only to enterprise clients or in specific sectors (retail, manufacturing, distribution).

Icon - Elements Webflow Library - BRIX Templates

Who can access my information?

Access is restricted based on identity, permissions, and the principle of least privilege: only authorized personnel who require access to operate the service. Relevant activities are logged and monitored.

Icon - Elements Webflow Library - BRIX Templates

How can I securely connect Datup to my infrastructure?

Datup supports various integration mechanisms with ERP, CRM, WMS, TMS, and data warehouses, including direct connections and Site-to-Site VPNs when private connectivity is required. Our technical team will define the mechanism with your IT department.

Icon - Elements Webflow Library - BRIX Templates

What happens to my data when the contract ends?

The return and deletion of information upon termination of the contractual relationship is carried out as defined in the service agreement and the Data Processing Agreement. You can request these documents from our team.

Icon - Elements Webflow Library - BRIX Templates