ComplianceMetrix

ComplianceMetrix

Search the Trust Center...
Ctrl +K

ComplianceMetrix | Trust Center

Everything you need to complete your security review is here. Browse documents, certifications, and compliance details with confidence. Our Trust Center is regularly updated to reflect the latest audit results, and subprocessor disclosures.

Badges

soc2-type-2
SOC 2 Type II
csa
CSA

Our Philosophy

Legacy software, siloed systems, manual processes, and point solutions that are pieced together provide subpar (and costly) quality, risk, and compliance management. CMX1 liberates businesses by giving them an all-in-one Enterprise Quality & Risk Management (eQRM) platform for automating the management of their products, supply chain partners, and locations with speed, confidence, and ease.

CMX1 is trusted by global businesses in over 160 countries to power everyday excellence. For over a decade, our unrivaled suite of enterprise solutions has equipped businesses with a single source of truth from the front lines to the corporate office and across the entire supply chain.

Quick Summary

One or more annual third-party audit(s)

Annual third-party penetration testing

Has a disaster recovery plan

Subprocessors list available

Has cyber insurance

Will enter into a DPA

Deletes customer data on request

Has an API available

Has a status page

Has a privacy policy

Documents & Knowledge Base FAQs

What we offer

OpsX1 | operational excellence

Digitize policies & procedures and training, create activities for compliance, and gain insights from real-time reporting

AuditsX1 | audit management

Conduct internal audits, desk audits, corrective action, & remediation while gaining insights from real-time reporting

SafetyX1 | safety management

Digitize policies & checklists, conduct inspections, resolve incidents, and gain insights from real-time reporting

RiskX1 | risk management

Mitigate risk to your business, customers, & employees with activities, incident, and recall management

PartnerX1 | partner management

Approve, onboard, & continuously manage suppliers with activities, documents, and reporting to ensure quality & safety

QualityX1 | quality management

Control quality & safety more efficiently with product specs, activities, monitoring & testing, and real-time reporting

Featured Documents

Subprocessors7

Subprocessor
Location of Processing
Usage Details
AWS

AWS

United States
Cloud infrastructure and security
Chargify

Chargify

United States
Chargify provides subscription billing services to CMX. Chargify is now Maxio, and with the Chargify product renamed to Advanced Billing
Microsoft Azure

Microsoft Azure

United States
Microsoft provides a managed AI inference service (Azure OpenAI) used to perform AI-powered text processing in support of customer-facing application features, such as language translation of notification content. Processing is stateless and limited to customer-submitted text. The service does not have access to internal systems or data beyond the content provided and does not retain customer data or use it for model training.
Rapid7

Rapid7

Ireland
Distributed Log management(InsightOPS) Intrusion Detection & Response(InsightIDR) Vulnerability Management(InsightVM)
Snowflake

Snowflake

United States
Data warehousing, Analytics, and Reporting
Twilio

Twilio

United States
Message Delivery Service
Zendesk

Zendesk

United States
Customer Support ticketing system
Last updated . .
View as:

Trusted by

Whole Foods Market
Burger King
Powered by Conveyor, the first end-to-end customer trust platform.
Learn more