[GTM glossary](/glossary.txt) Data security

Data & Enrichment

# Data security

In short

Data security is the practice of protecting data from unauthorized access, theft, loss, and tampering. It uses technical controls such as encryption and access management, together with policies and training.

For GTM teams it covers customer and prospect data stored in the CRM, marketing tools, data warehouses, and shared spreadsheets. Security protects data; data privacy decides how data may be used. This page is general information, not legal advice or a compliance guide.

## Core data security controls

* **Encryption:** Scramble data in transit and at rest so intercepted files are unreadable.
* **Access control:** Give each person only the access their role needs, often called least privilege.
* **Authentication:** Require strong passwords and multi-factor authentication or single sign-on.
* **Logging and monitoring:** Record who accessed or exported data so you can spot misuse.
* **Backups:** Keep recoverable copies in case of deletion or ransomware.

---

## Where GTM data is at risk

### Exports and spreadsheets

A CSV of leads emailed or saved to a personal drive leaves every control you set up. Limit who can export and where files may live.

### Integrations and API keys

Every tool connected to your CRM can read or write its data. Review connected apps regularly and remove unused ones.

### Departing employees

Remove access promptly when someone leaves, including shared logins to enrichment and sequencing tools.

---

## How to vet a vendor's security

Before a tool touches customer data, ask for its security documentation. Typical items include an independent audit report such as SOC 2 or ISO 27001, an encryption description, and a breach notification process. A report shows controls existed during an audit period; it does not guarantee nothing will go wrong.

---

## Common mistakes

* Sharing one admin login across a team.
* Giving every rep full export rights by default.
* Assuming a vendor is secure because it has a security page.
* Treating security as only an IT problem rather than a habit for every user.

---

## Data security FAQs

**What is data security?**

Data security is the protection of data from unauthorized access, loss, theft, and alteration. It combines technical measures like encryption, access controls, and monitoring with organizational ones such as policies, training, and incident response plans.

**What is the difference between data security and data privacy?**

Data security protects data from breaches and misuse using technical and organizational controls. Data privacy governs what you may collect and do with personal data and the rights people have over it. You need both: security without privacy still misuses data.

**How can sales and marketing teams protect customer data?**

Use least-privilege access, enforce multi-factor authentication, limit CSV exports, review connected apps, remove departed users quickly, and vet vendors' security reports. Train staff not to keep lead lists in personal drives or send them through unsecured channels.

**What should I check about a vendor's data security?**

Ask for independent audit reports such as SOC 2 or ISO 27001, how data is encrypted in transit and at rest, who can access your data, how long it is retained, and how the vendor notifies customers of a breach.

Share term

---

## More related phrases

* [CCPA](/glossary/ccpa.txt)
* [Data lake](/glossary/data-lake.txt)
* [Security questionnaire](/glossary/security-questionnaire.txt)

## Similar phrases

* [Data privacy](/glossary/data-privacy.txt)  
Data privacy is the set of rules and practices that govern how personal information is collected, used, stored, and shared, so people keep control over their data.
* [Data vendor](/glossary/data-vendor.txt)  
A data vendor is any company you buy or license data or data services from, including providers, resellers, and platforms that bundle data with software.
* [GDPR compliance](/glossary/gdpr-compliance.txt)  
GDPR compliance means meeting the requirements of the EU General Data Protection Regulation when collecting, using, and storing personal data of people in the European Union.
* [CRM integration](/glossary/crm-integration.txt)  
CRM integration connects your customer relationship management system with other tools, such as marketing automation, data providers, and sales engagement, so records and activity sync automatically between them.
* [Data warehouse](/glossary/data-warehouse.txt)  
A data warehouse is a central system that stores structured data from many sources, such as CRM and product usage, organized for reporting and analysis.