Trust Center

Security FAQs

Have questions about how we keep your data secure? Below are clear answers to the questions we hear most often.

Where is Cuseum data hosted?

Cuseum is hosted on top-tier cloud infrastructure in secure, geographically redundant data centers, with multi-availability-zone deployments to ensure high availability.

How is data encrypted?

All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Encryption keys are managed in dedicated key-management systems.

Does Cuseum process payment card data?

No. We do not store full payment card numbers on our systems. Payments are processed through PCI DSS Level 1 certified providers, keeping cardholder data outside our environment.

Are you GDPR and CCPA compliant?

Yes. Our privacy program is designed to comply with GDPR, UK GDPR, CCPA/CPRA, and other major privacy regulations, including support for data subject rights requests.

Do you participate in the EU-U.S. Data Privacy Framework?

Yes. Cuseum participates in the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework for lawful international data transfers.

How often do you perform security testing?

We perform automated vulnerability scans continuously and engage independent third-party penetration testers on a recurring basis.

What is your uptime commitment?

We target 99.9% availability for our production services, backed by redundant architecture, proactive monitoring, and a documented disaster recovery plan.

Who has access to my institution's data?

Access to customer data is limited to authorized personnel on a strict need-to-know basis using least-privilege access controls. All access is logged for accountability.

How do I report a security vulnerability?

Email security@cuseum.com with details. We acknowledge reports promptly and follow responsible disclosure practices.

Can I get a copy of your security documentation?

Customers and qualified prospects can request our security overview, DPA, and other documentation by contacting their account representative or emailing security@cuseum.com.

Have a security concern?

Reach our security team directly at security@cuseum.com or visit our Contact & Reporting page.

About Cuseum

Cuseum is an engagement platform built for museums, cultural attractions, and membership organizations. We help hundreds of art museums, history museums, science centers, children's museums, zoos, aquariums, botanical gardens, performing arts venues, historic sites, and alumni associations modernize the way they engage members, donors, and visitors. Our products span digital membership cards, mobile apps and audio guides, augmented reality experiences, member portals, push notifications, SMS messaging, and analytics — all built specifically for the cultural sector rather than adapted from generic retail or marketing tools.

Digital membership is at the core of what we do. Cuseum lets organizations replace plastic membership cards with mobile-wallet passes that members save to Apple Wallet and Google Wallet. Passes update in real time, support tap-to-scan entry, and reduce the printing, fulfillment, and shipping costs associated with traditional cards. Members get their benefits instantly, staff spend less time on replacements and renewals, and organizations reduce their environmental footprint at the same time. Cuseum's digital membership product works alongside existing CRM, ticketing, and POS systems so member data stays in sync without manual exports.

Beyond membership, Cuseum powers branded mobile experiences for tours, exhibits, self-guided storytelling, and wayfinding. Curators and education teams can publish multilingual content, integrate audio and video, and update tours without code. Visitor services teams can drive deeper engagement with push notifications about new programs, exhibitions, and special events, while marketing teams use built-in analytics to understand which content resonates, which members are at risk of lapsing, and where to invest next. The result is a single platform that supports the entire visitor and member lifecycle, from first awareness through long-term loyalty.

Cuseum integrates with the systems cultural organizations already rely on, including Tessitura, Altru, Salesforce, Blackbaud Raiser's Edge and eTapestry, ACME, Centaman, AudienceView, DonorPerfect, Neon CRM, Patron Manager, Salsa Labs, Keela, Kindful, Klaviyo, HubSpot, Mailchimp, iMIS, GrowthZone, Microsoft Dynamics 365, Square, SugarCRM, Teamwork, Eventbrite, EventPro, Etix, Fever, Doubleknot, Dexibit, CatalogIt, CollectionSpace, Axiell, Clover, and many more. Whether your team is rolling out a digital membership program for the first time, replacing a legacy mobile app, launching a new exhibition, or evaluating how to better retain members year over year, Cuseum's team of strategists, designers, and engineers will help you scope the project, configure the platform, train staff, and communicate the rollout to your audience.

To learn more, request a personalized demo and we'll tailor a 20-minute walkthrough to the systems and goals that matter most for your organization. You can also explore our growing library of case studies, ebooks, webinars, and playbooks for real-world examples of cultural organizations putting digital engagement to work.