Your team's data is never shared with anyone outside your team. The Swarm is SOC 2 certified and GDPR and CCPA compliant. For our full security documentation and policies, visit our Trust Center at trust.theswarm.com.
Who can see your data
The connections your users and connectors import belong to your team and are visible only to its members, based on their role. See User roles and permissions.
Connectors who share their network through the Connector Portal or an invite link share it only with the team that invited them. They never see that team's data.
The Swarm has read-only access to LinkedIn and Google data. We never post, message or connect on anyone's behalf, and we never read email content or calendar event details.
Access to customer data inside The Swarm is restricted by role-based permissions and audited internal controls.
Security and compliance
SOC 2: certified, with the audit completed in November 2026.
GDPR: we provide a Data Processing Agreement (DPA) on request.
Hosting: our infrastructure runs on AWS. We offer EU data hosting in Ireland for customers with European data residency requirements.
Backups and recovery: documented backup, disaster recovery and breach notification procedures, with a recovery point objective under 15 minutes and a recovery time objective under 1 hour for critical systems.
Privacy requests: we keep a Do Not Sell process and handle privacy rights requests within 24 hours.
Importing contacts located in the EU
Many customers import contacts located in the EU. As long as your organisation has a legitimate interest, or consent where it applies, importing them into The Swarm is fine, on the same basis as any standard CRM.
Requests
To request a DPA or EU hosting, contact support@theswarm.com.
To remove connections or delete your account, see Remove connections or delete your account.