Data security
In short
Data security is the practice of protecting data from unauthorized access, theft, loss, and tampering. It uses technical controls such as encryption and access management, together with policies and training.
For GTM teams it covers customer and prospect data stored in the CRM, marketing tools, data warehouses, and shared spreadsheets. Security protects data; data privacy decides how data may be used. This page is general information, not legal advice or a compliance guide.
Core data security controls
- Encryption: Scramble data in transit and at rest so intercepted files are unreadable.
- Access control: Give each person only the access their role needs, often called least privilege.
- Authentication: Require strong passwords and multi-factor authentication or single sign-on.
- Logging and monitoring: Record who accessed or exported data so you can spot misuse.
- Backups: Keep recoverable copies in case of deletion or ransomware.
Where GTM data is at risk
Exports and spreadsheets
A CSV of leads emailed or saved to a personal drive leaves every control you set up. Limit who can export and where files may live.
Integrations and API keys
Every tool connected to your CRM can read or write its data. Review connected apps regularly and remove unused ones.
Departing employees
Remove access promptly when someone leaves, including shared logins to enrichment and sequencing tools.
How to vet a vendor's security
Before a tool touches customer data, ask for its security documentation. Typical items include an independent audit report such as SOC 2 or ISO 27001, an encryption description, and a breach notification process. A report shows controls existed during an audit period; it does not guarantee nothing will go wrong.
Common mistakes
- Sharing one admin login across a team.
- Giving every rep full export rights by default.
- Assuming a vendor is secure because it has a security page.
- Treating security as only an IT problem rather than a habit for every user.
Data security FAQs
What is data security?
Data security is the protection of data from unauthorized access, loss, theft, and alteration. It combines technical measures like encryption, access controls, and monitoring with organizational ones such as policies, training, and incident response plans.
What is the difference between data security and data privacy?
Data security protects data from breaches and misuse using technical and organizational controls. Data privacy governs what you may collect and do with personal data and the rights people have over it. You need both: security without privacy still misuses data.
How can sales and marketing teams protect customer data?
Use least-privilege access, enforce multi-factor authentication, limit CSV exports, review connected apps, remove departed users quickly, and vet vendors' security reports. Train staff not to keep lead lists in personal drives or send them through unsecured channels.
What should I check about a vendor's data security?
Ask for independent audit reports such as SOC 2 or ISO 27001, how data is encrypted in transit and at rest, who can access your data, how long it is retained, and how the vendor notifies customers of a breach.
