Trust center

Hive CPQ uses SSO and mul­ti-fac­tor authen­ti­ca­tion, man­aged through Auth0, a reli­able part­ner that han­dles MFA and SSO across mul­ti­ple third-par­ty providers. 

As a man­u­fac­tur­er or admin, you cre­ate accounts and invite any­one who needs access to your envi­ron­ment. Role-Based Access Con­trol means each user only sees what you allow, and admin­is­tra­tive func­tions stay lim­it­ed to autho­rized admins.

We run auto­mat­ed and man­u­al secu­ri­ty test­ing inter­nal­ly, plus year­ly pen­e­tra­tion test­ing by an autho­rised third party.

Our appli­ca­tion secu­ri­ty approach is doc­u­ment­ed on our doc­u­men­ta­tion por­tal. Don’t have access yet? Request it.

We update the plat­form with secu­ri­ty patch­es reg­u­lar­ly, dai­ly when need­ed. Planned main­te­nance hap­pens only at week­ends, and we always tell you in advance. Urgent fix­es can hap­pen mid­week, but we keep dis­rup­tion to a min­i­mum. You can check cur­rent sta­tus on our live sta­tus page.

We work only with sub­proces­sors and third-par­ty ven­dors — from email and host­ing to authen­ti­ca­tion and invoic­ing — that meet strict secu­ri­ty stan­dards and pro­to­cols, as required by our ISO 27001 certification.

With 24/7 mon­i­tor­ing, we detect and respond the moment an issue aris­es. Auto­mat­ed alerts noti­fy our team, and depend­ing on the inci­dent, your ded­i­cat­ed Hive con­tact reach­es out to you. 

Our inci­dent response plan kicks in: we pri­or­i­tize the fix, keep the sta­tus page up to date, and run a post-mortem. Hive CPQ has an aver­age uptime of 99.8% and is avail­able sev­en days a week.

Yes. Hive CPQ has a dis­as­ter recov­ery plan in place. We run reg­u­lar back­up and recov­ery tests, iden­ti­fy poten­tial risks proac­tive­ly, and fol­low clear pro­ce­dures in line with ISO 27001.

All data is stored with­in the Euro­pean Union, in our data cen­tre in Ger­many, on secure cloud servers that meet mod­ern secu­ri­ty stan­dards. Our head­quar­ters is in Bel­gium, so your envi­ron­ment is set up and man­aged from there.

You stay in con­trol of your data at all times. We retain it only while you active­ly use Hive CPQ. If you stop using the plat­form, we per­ma­nent­ly delete all your data. If you return lat­er, a full rein­stal­la­tion and set­up is required.

We don’t use your data beyond what’s need­ed for imple­men­ta­tion or sup­port. You stay in con­trol and can ask how your data is used, or request its dele­tion, at any time. 

Want to help improve Hive CPQ? Sub­mit fea­ture requests, share feed­back with our con­sul­tants, or report bugs through our sup­port system.

Hive CPQ is ISO 27001 cer­ti­fied. To main­tain cer­ti­fi­ca­tion, we under­go annu­al sur­veil­lance audits and a full recer­ti­fi­ca­tion every three years by inde­pen­dent secu­ri­ty orga­ni­za­tion Kiwa. You can down­load the cer­tifi­cate.

Each cus­tomer’s data is stored sep­a­rate­ly, so only the peo­ple you invite to your envi­ron­ment can access it, based on the roles you assign them.

Our ISO 27001 cer­ti­fi­ca­tion also cov­ers GDPR. Because all our data is stored in Europe, Euro­pean reg­u­la­tions apply. You can con­tact us any­time to ask how your data is used, where it’s stored, or to request its deletion.