Trust center

Hive CPQ uses SSO and multi-factor authen­tic­a­tion, man­aged through Auth0, a reli­able part­ner that handles MFA and SSO across mul­tiple third-party providers. 

As a man­u­fac­turer or admin, you cre­ate accounts and invite any­one who needs access to your envir­on­ment. Role-Based Access Con­trol means each user only sees what you allow, and admin­is­trat­ive func­tions stay lim­ited to author­ized admins.

We run auto­mated and manu­al secur­ity test­ing intern­ally, plus yearly pen­et­ra­tion test­ing by an author­ised third party.

Our applic­a­tion secur­ity approach is doc­u­mented on our doc­u­ment­a­tion portal. Don’t have access yet? Request it.

We update the plat­form with secur­ity patches reg­u­larly, daily when needed. Planned main­ten­ance hap­pens only at week­ends, and we always tell you in advance. Urgent fixes can hap­pen mid­week, but we keep dis­rup­tion to a min­im­um. You can check cur­rent status on our live status page.

We work only with sub­pro­cessors and third-party vendors — from email and host­ing to authen­tic­a­tion and invoicing — that meet strict secur­ity stand­ards and pro­to­cols, as required by our ISO 27001 certification.

With 24/7 mon­it­or­ing, we detect and respond the moment an issue arises. Auto­mated alerts noti­fy our team, and depend­ing on the incid­ent, your ded­ic­ated Hive con­tact reaches out to you. 

Our incid­ent response plan kicks in: we pri­or­it­ize the fix, keep the status page up to date, and run a post-mortem. Hive CPQ has an aver­age uptime of 99.8% and is avail­able sev­en days a week.

Yes. Hive CPQ has a dis­aster recov­ery plan in place. We run reg­u­lar backup and recov­ery tests, identi­fy poten­tial risks pro­act­ively, and fol­low clear pro­ced­ures in line with ISO 27001.

All data is stored with­in the European Uni­on, in our data centre in Ger­many, on secure cloud serv­ers that meet mod­ern secur­ity stand­ards. Our headquar­ters is in Bel­gi­um, so your envir­on­ment is set up and man­aged from there.

You stay in con­trol of your data at all times. We retain it only while you act­ively use Hive CPQ. If you stop using the plat­form, we per­man­ently delete all your data. If you return later, a full rein­stall­a­tion and setup is required.

We don’t use your data bey­ond what’s needed for imple­ment­a­tion or sup­port. You stay in con­trol and can ask how your data is used, or request its dele­tion, at any time. 

Want to help improve Hive CPQ? Sub­mit fea­ture requests, share feed­back with our con­sult­ants, or report bugs through our sup­port system.

Hive CPQ is ISO 27001 cer­ti­fied. To main­tain cer­ti­fic­a­tion, we under­go annu­al sur­veil­lance audits and a full recer­ti­fic­a­tion every three years by inde­pend­ent secur­ity organ­iz­a­tion Kiwa. You can down­load the cer­ti­fic­ate.

Each cus­tom­er­’s data is stored sep­ar­ately, so only the people you invite to your envir­on­ment can access it, based on the roles you assign them.

Our ISO 27001 cer­ti­fic­a­tion also cov­ers GDPR. Because all our data is stored in Europe, European reg­u­la­tions apply. You can con­tact us any­time to ask how your data is used, where it’s stored, or to request its deletion.