# Security & Privacy

CTD is built privacy-first. Learn what data we collect, how it's stored, and how to control your visibility.

## Security overview

Our organizational, cloud, application, architecture, software, and business-continuity security practices.

## What data does CTD collect?

We only store email headers — from, to, cc, date, subject — never the body of your emails.

## How CTD stores and protects your data

Encryption at rest and in transit, SOC 2 compliance, and infrastructure security.

## Permissions and access controls

What team members, admins, and external members can see — and what they can't.

## Controlling your network visibility

Make your account private, hide specific connections, and manage what colleagues can see.

## Compliance and certifications

GDPR, CCPA, SOC 2 Type II, and enterprise security review documentation.

## Sub-processors

The third-party sub-processors CTD uses, how we vet them, and the data each one processes.

## Data retention and deletion

How long CTD keeps your data and how to request full deletion of your account.

## Security FAQ

Answers to the most common security and privacy questions from enterprise customers.