{"id":13414,"date":"2024-09-30T10:44:04","date_gmt":"2024-09-30T14:44:04","guid":{"rendered":"https:\/\/joindeleteme.com\/?post_type=is-site-safe&#038;p=13414"},"modified":"2024-09-30T10:44:05","modified_gmt":"2024-09-30T14:44:05","slug":"is-zoho-safe","status":"publish","type":"is-site-safe","link":"https:\/\/joindeleteme.com\/is-site-safe\/is-zoho-safe\/","title":{"rendered":"Is Zoho Safe?"},"content":{"rendered":"\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Table of Contents<\/h2><nav><ul><li><a href=\"#what-is-zoho\">What Is Zoho?<\/a><\/li><li><a href=\"#is-zoho-safe\">Is Zoho Safe?<\/a><\/li><li><a href=\"#is-zoho-private\">Is Zoho Private?<\/a><\/li><li><a href=\"#how-to-improve-your-safety-and-privacy-on-zoho\">How to Improve Your Safety and Privacy On Zoho<\/a><\/li><\/ul><\/nav><\/div>\n\n\n\n<p>If you use or plan to use Zoho, you need to know: Is Zoho safe?&nbsp;<\/p>\n\n\n\n<p>Below, we explain whether Zoho is:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Safe to use.\u00a0<\/li>\n\n\n\n<li>Good for privacy.\u00a0<\/li>\n<\/ul>\n\n\n\n<p>We also look at some steps you can take to improve both your safety and privacy when using this online service.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-is-zoho\">What Is Zoho?<\/h2>\n\n\n\n<p>Zoho is a suite of cloud-based business software that was founded in 1996. It is designed to help organizations manage various aspects of their operations.\u00a0<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"504\" src=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/oho2-1-1-1024x504.png\" alt=\"Zoho\" class=\"wp-image-13419\" srcset=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/oho2-1-1-1024x504.png 1024w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/oho2-1-1-300x148.png 300w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/oho2-1-1-768x378.png 768w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/oho2-1-1.png 1190w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Among Zoho\u2019s offerings are the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Zoho CRM helps businesses manage customer relationships, track sales, and automate workflows.\u00a0<\/li>\n\n\n\n<li>Zoho Workplace provides productivity tools, including email hosting and document management.\u00a0<\/li>\n\n\n\n<li>Zoho Books offers accounting features, making it easier for businesses to handle invoicing, expense tracking, and tax compliance.<\/li>\n\n\n\n<li>Zoho Projects allows teams to plan and track projects effectively.\u00a0<\/li>\n\n\n\n<li>Zoho People automates HR tasks like employee onboarding and performance reviews.\u00a0<\/li>\n\n\n\n<li>Zoho One, a bundled offering of over 45 integrated applications, serves as an all-in-one solution for businesses, covering everything from CRM and accounting to marketing and HR.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"is-zoho-safe\">Is Zoho Safe?<\/h2>\n\n\n\n<p>Zoho is generally considered safe and secure for business use.&nbsp;<\/p>\n\n\n\n<p>The company has implemented a <a href=\"https:\/\/help.zoho.com\/portal\/en\/kb\/common-faqs\/articles\/how-secure-is-my-data-with-zoho\" target=\"_blank\" rel=\"noreferrer noopener\">range of measures<\/a>, including physical, hardware, software, and process-related techniques, to ensure the security and privacy of its users&#8217; data.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"612\" src=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/zohosecurity-1-1024x612.png\" alt=\"How secure is my data with Zoho? page\" class=\"wp-image-13415\" srcset=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/zohosecurity-1-1024x612.png 1024w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/zohosecurity-1-300x179.png 300w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/zohosecurity-1-768x459.png 768w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/zohosecurity-1.png 1232w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Zoho uses encryption to protect data in transit and at rest. This means that your data is encrypted when it is being transferred over the internet and stored on Zoho\u2019s servers.&nbsp;<\/p>\n\n\n\n<p>It also offers two-factor authentication as an extra layer of account security.<\/p>\n\n\n\n<p>The security company UpGuard gives Zoho a score of <a href=\"https:\/\/www.upguard.com\/security-report\/zoho\" target=\"_blank\" rel=\"noreferrer noopener\">811 out of 950<\/a>. The company notes that Zoho&#8217;s content may display in frames in some browsers (making it vulnerable to clickjacking), the Content Security Policy is not implemented, HttpOnly cookies aren&#8217;t used, and there&#8217;s a vulnerability to MIME confusion attacks.<\/p>\n\n\n\n<p>A 2021 hack saw the data of <a href=\"https:\/\/www.techmonitor.ai\/technology\/cybersecurity\/zoho-hack-emmisary-panda-apt-china?cf-view\" target=\"_blank\" rel=\"noreferrer noopener\">nine global organizations<\/a> exposed on Zoho.\u00a0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Is Zoho safe to use?<\/h3>\n\n\n\n<p>Yes, Zoho is generally regarded as a safe and secure option for business purposes.<\/p>\n\n\n\n<p>The <a href=\"https:\/\/www.zoho.com\/trust.html\" target=\"_blank\" rel=\"noreferrer noopener\">company says<\/a> that all of its products are secure by design, and every feature and change is reviewed and analyzed for potential vulnerabilities.\u00a0<\/p>\n\n\n\n<p>Data is encrypted at rest and in transit, each customer\u2019s data is separated from other customers\u2019 data, and data retention and backups happen securely.&nbsp;<\/p>\n\n\n\n<p>Zoho has a \u201crobust\u201d logging and monitoring system and intrusion detection and prevention systems.&nbsp;<\/p>\n\n\n\n<p>They use third-party and in-house tools to scan for vulnerabilities.&nbsp;<\/p>\n\n\n\n<p>Custom data is spread through data centers in different geographies to ensure data availability. The company ensures that its data centers are physically secure.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"619\" src=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/securityatzoho-1024x619.png\" alt=\"Security at Zoho\" class=\"wp-image-13417\" srcset=\"https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/securityatzoho-1024x619.png 1024w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/securityatzoho-300x181.png 300w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/securityatzoho-768x464.png 768w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/securityatzoho-1536x928.png 1536w, https:\/\/joindeleteme.com\/wp-content\/uploads\/2024\/09\/securityatzoho.png 1600w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Zoho even has a <a href=\"https:\/\/www.zoho.com\/security.html\" target=\"_blank\" rel=\"noreferrer noopener\">security whitepaper<\/a> that outlines its security controls in great detail and a <a href=\"https:\/\/www.zoho.com\/security-faq.html\" target=\"_blank\" rel=\"noreferrer noopener\">security FAQs<\/a> page.\u00a0<\/p>\n\n\n\n<p>UpGuard, a security firm, rates Zoho with a score of <a href=\"https:\/\/www.upguard.com\/security-report\/zoho\" target=\"_blank\" rel=\"noreferrer noopener\">811 out of 950<\/a>. They have pointed out that Zoho&#8217;s content might display in frames on some browsers, potentially exposing it to clickjacking risks. Furthermore, Zoho does not implement a Content Security Policy, HttpOnly cookies are not used, and it is susceptible to MIME confusion attacks.<\/p>\n\n\n\n<p>In 2021, <a href=\"https:\/\/www.techmonitor.ai\/technology\/cybersecurity\/zoho-hack-emmisary-panda-apt-china?cf-view\" target=\"_blank\" rel=\"noreferrer noopener\">a security breach<\/a> resulted in data exposure from nine global organizations using Zoho.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Is Zoho safe, according to Reddit?<\/h3>\n\n\n\n<p>Redditors have mixed opinions about Zoho.<\/p>\n\n\n\n<p>While some say they\u2019ve been using Zoho for years and <a href=\"https:\/\/www.reddit.com\/r\/smallbusiness\/comments\/15ef9z9\/zoho_one_too_good_to_be_true_or_hidden_gem\/\" target=\"_blank\" rel=\"noreferrer noopener\">are happy<\/a> with its offerings, others say there was <a href=\"https:\/\/www.reddit.com\/r\/smallbusiness\/comments\/lmpzud\/is_zoho_one_too_good_to_be_true\/\" target=\"_blank\" rel=\"noreferrer noopener\">too much downtime<\/a> for them to continue using Zoho\u2019s products.<\/p>\n\n\n\n<p><a href=\"https:\/\/www.reddit.com\/r\/privacytoolsIO\/comments\/guy3tj\/how_good_is_zoho_mail_its_apps_for_privacy\/\" target=\"_blank\" rel=\"noreferrer noopener\">One Redditor<\/a> also flagged that in its <a href=\"https:\/\/www.zoho.com\/privacy.html#long\" target=\"_blank\" rel=\"noreferrer noopener\">privacy policy<\/a>, Zoho says it \u201cmay need to share your personal information and aggregated or de-identified information with third-party service providers that we engage, such as marketing and advertising partners.\u201d\u00a0\u00a0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Is Zoho Invoice safe?<\/h3>\n\n\n\n<p>Yes, Zoho Invoice appears to be safe.<\/p>\n\n\n\n<p>Zoho has written an entire <a href=\"https:\/\/www.zoho.com\/security.html\" target=\"_blank\" rel=\"noreferrer noopener\">security whitepaper<\/a> on its security controls and practices.\u00a0<\/p>\n\n\n\n<p>It gets good reviews from publications like <a href=\"https:\/\/www.pcmag.com\/reviews\/zoho-invoice\" target=\"_blank\" rel=\"noreferrer noopener\">PCMag<\/a> and <a href=\"https:\/\/www.techrepublic.com\/article\/zoho-invoice-review\/\" target=\"_blank\" rel=\"noreferrer noopener\">TechRepublic<\/a>.\u00a0<\/p>\n\n\n\n<p>The app has 1+ million downloads on <a href=\"https:\/\/play.google.com\/store\/apps\/details?id=com.zoho.invoice&amp;hl=en_US\" target=\"_blank\" rel=\"noreferrer noopener\">Google Play<\/a> and a 4.8 out of 5 rating from 18.8k reviews.\u00a0 It has a 4.9 out of 5 rating on the <a href=\"https:\/\/apps.apple.com\/us\/app\/zoho-invoice-maker-app\/id413017364\" target=\"_blank\" rel=\"noreferrer noopener\">App Store<\/a> from more than 6k reviews.\u00a0<\/p>\n\n\n\n<p>Zoho Invoice comes with security and privacy features, like <a href=\"https:\/\/www.zoho.com\/us\/invoice\/kb\/general\/enable-tfa.html\" target=\"_blank\" rel=\"noreferrer noopener\">multi-factor authentication<\/a> and the ability to <a href=\"https:\/\/www.zoho.com\/us\/invoice\/help\/settings\/privacy.html\" target=\"_blank\" rel=\"noreferrer noopener\">encrypt and save sensitive information<\/a>.\u00a0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Is Zoho Writer safe?<\/h3>\n\n\n\n<p>Yes, Zoho Writer is generally considered safe.&nbsp;<\/p>\n\n\n\n<p>Zoho has written an entire <a href=\"https:\/\/www.zoho.com\/security.html\" target=\"_blank\" rel=\"noreferrer noopener\">security whitepaper<\/a> on its security controls and practices.<\/p>\n\n\n\n<p>All documents stored in Zoho Writer, along with personally identifiable information such as email addresses and IP addresses, are <a href=\"https:\/\/help.zoho.com\/portal\/en\/kb\/writer\/security\/articles\/encryption-at-zoho-writer#What_Data_we_encrypt_in_Zoho_Writer\" target=\"_blank\" rel=\"noreferrer noopener\">encrypted<\/a>. Additionally, every file and document uploaded to Zoho Writer is encrypted. This includes images (supported formats: jpg, png, gif, jpeg, and bmp) and documents (supported file formats: docx, doc, docm, dot, dotm, dotx, rtf, odt, txt, html, htm, tex, and pdf) that can be imported into Writer.<\/p>\n\n\n\n<p>Zoho Writer has other <a href=\"https:\/\/help.zoho.com\/portal\/en\/community\/topic\/did-you-know-you-can-secure-your-content-with-zoho-writer#:~:text=Zoho%20Writer%20offers%20several%20tools,documents%20for%20collaboration%20or%20review.\" target=\"_blank\" rel=\"noreferrer noopener\">security and privacy features<\/a>, including the ability to password-protect documents and conceal sensitive content.\u00a0<\/p>\n\n\n\n<p>The tool has <a href=\"https:\/\/help.zoho.com\/portal\/en\/kb\/writer\/security\/articles\/user-data-privacy-and-compliance\" target=\"_blank\" rel=\"noreferrer noopener\">a separate page<\/a> explaining its approach to user data privacy and compliance, as well as its approach to <a href=\"https:\/\/www.zoho.com\/writer\/gdpr.html\" target=\"_blank\" rel=\"noreferrer noopener\">GDPR<\/a> and <a href=\"https:\/\/help.zoho.com\/portal\/en\/kb\/writer\/security\/articles\/hippa-compliance-with-zoho-writer#HIPAA_compliance_in_Zoho_Writer\" target=\"_blank\" rel=\"noreferrer noopener\">HIPAA compliance<\/a>.\u00a0<\/p>\n\n\n\n<p>Zoho Writer has a 4.5 out of 5 (from 47 ratings) rating on the <a href=\"https:\/\/apps.apple.com\/in\/app\/zoho-writer-document-editor\/id808719064\" target=\"_blank\" rel=\"noreferrer noopener\">App Store<\/a> and a 3.3 out of 5 rating (from 3,905 votes) on <a href=\"https:\/\/play.google.com\/store\/apps\/details?id=com.zoho.writer&amp;hl=en_US\" target=\"_blank\" rel=\"noreferrer noopener\">Google Play.<\/a>\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"is-zoho-private\">Is Zoho Private?<\/h2>\n\n\n\n<p>Depends on your definition of \u201cprivate.\u201d<\/p>\n\n\n\n<p>Unlike many tech companies that generate revenue through targeted advertising, Zoho does not sell user data to third-party advertisers. Zoho\u2019s business model is primarily based on subscription fees for its services.&nbsp;<\/p>\n\n\n\n<p>However, in its <a href=\"https:\/\/www.zoho.com\/privacy.html#long\" target=\"_blank\" rel=\"noreferrer noopener\">privacy policy<\/a>, Zoho says, <em>\u201cWe may need to share your personal information and aggregated or de-identified information with third-party service providers that we engage, such as marketing and advertising partners, event organizers, web analytics providers and payment processors.\u201d\u00a0<\/em><\/p>\n\n\n\n<p>This has <a href=\"https:\/\/www.reddit.com\/r\/privacytoolsIO\/comments\/guy3tj\/how_good_is_zoho_mail_its_apps_for_privacy\/\" target=\"_blank\" rel=\"noreferrer noopener\">made some people wary<\/a> of using Zoho.\u00a0<\/p>\n\n\n\n<p>Zoho emphasizes that its users own their data. The company provides tools that allow users to access, export, and delete their data at any time.&nbsp;<\/p>\n\n\n\n<p>The company is very clear about how long they keep your data &#8211; for as long as you use Zoho Services. After you terminate your Zoho account, your data is deleted from Zoho\u2019s active database within 6 months and from their backups within 3 months after that.<\/p>\n\n\n\n<p>Zoho allows businesses to choose where their data is stored by offering data centers in various regions around the world. This helps organizations comply with local data protection regulations and gives users more control over their data\u2019s geographic location.<\/p>\n\n\n\n<p>Zoho is transparent about its privacy practices, clearly outlining how data is collected, used, and protected in its <a href=\"https:\/\/www.zoho.com\/privacy.html\" target=\"_blank\" rel=\"noreferrer noopener\">privacy policies<\/a>.\u00a0<\/p>\n\n\n\n<p>Zoho&#8217;s privacy policy scores a \u201c<a href=\"https:\/\/tosdr.org\/en\/service\/856\" target=\"_blank\" rel=\"noreferrer noopener\">Grade A<\/a>\u201d on Terms of Service; Didn&#8217;t Read (ToS;DR), a project that rates internet services\u2019 terms of service and privacy policies. There are no concerns listed on the ToS;DR website.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-to-improve-your-safety-and-privacy-on-zoho\">How to Improve Your Safety and Privacy On Zoho<\/h2>\n\n\n\n<p>Follow the steps below for a more private and secure experience while using Zoho.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Customize access permissions. <\/strong>Use role-based access controls to limit who within your organization can access specific data and features. This reduces the risk of internal privacy breaches by ensuring only authorized personnel can access sensitive information.<\/li>\n\n\n\n<li><strong>Check app integrations. <\/strong>Review and manage third-party integrations connected to your Zoho account. Only allow necessary integrations and ensure they have strong privacy practices to avoid potential data leaks or unauthorized access.<\/li>\n\n\n\n<li><strong>Only provide necessary information. <\/strong>When setting up and using Zoho applications, share only the information that is strictly necessary for the service to function. This minimizes data collection and reduces potential privacy risks.<\/li>\n\n\n\n<li><strong>Turn off unused features.<\/strong> If there are features or services within Zoho that you do not use, consider turning them off. This helps minimize the amount of data being collected and stored, enhancing your overall privacy.<\/li>\n\n\n\n<li><strong>Monitor account access. <\/strong>Regularly review the activity logs available in Zoho to track who has accessed your account and from where. This helps you identify any unusual or unauthorized access and take action quickly.<\/li>\n\n\n\n<li><strong>Set up alerts. <\/strong>Configure alerts to notify you of any suspicious activity or unauthorized login attempts. This proactive approach allows you to respond quickly to potential security threats.<\/li>\n\n\n\n<li><strong>Enable end-to-end encryption.<\/strong> If your Zoho plan supports it, turn on end-to-end encryption for emails and documents. This ensures that only the intended recipients can access the content, keeping your data secure.<\/li>\n\n\n\n<li><strong>Encrypt sensitive data.<\/strong> Before uploading particularly sensitive information to Zoho, consider using additional encryption tools.\u00a0<\/li>\n\n\n\n<li><strong>Create secure backups.<\/strong> Regularly back up your important data outside of Zoho in a secure location. This ensures that you have control over your data and can restore it if needed, even in the event of data loss.<\/li>\n\n\n\n<li><strong>Limit data sharing. <\/strong>Be cautious when sharing data or documents within Zoho, especially if it involves sensitive information. Use Zoho\u2019s sharing settings to control who can view, edit, or share your data.<\/li>\n\n\n\n<li><strong>Use expiration dates.<\/strong> When sharing files or granting access to information, set expiration dates for the access. This ensures that shared data isn\u2019t available indefinitely, reducing the risk of long-term exposure.<\/li>\n\n\n\n<li><strong>Delete unnecessary data. <\/strong>Regularly clean up and delete data that is no longer needed from your Zoho account. This reduces the amount of information that could potentially be exposed in the event of a breach.<\/li>\n\n\n\n<li><strong>Set retention policies.<\/strong> Use Zoho\u2019s data retention settings to automatically delete data after a certain period.\u00a0<\/li>\n\n\n\n<li><strong>Use Zoho\u2019s privacy tools.<\/strong> Take advantage of Zoho\u2019s tools to export your data and request deletion if you no longer need the service. This ensures that you maintain control over your information and can manage it according to your privacy preferences.<\/li>\n\n\n\n<li><strong>Privacy dashboard.<\/strong> Utilize Zoho\u2019s privacy dashboard to manage your privacy settings across all Zoho applications from one place.\u00a0<\/li>\n\n\n\n<li><strong>Create strong passwords. <\/strong>Use a strong password for your Zoho account, and avoid using the same password across multiple sites.<\/li>\n\n\n\n<li><strong>Enable 2FA.<\/strong> Turn on two-factor authentication (2FA) for an extra layer of security. This requires a second form of verification (like a code sent to your phone) in addition to your password, making it much harder for unauthorized users to access your account.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Our guide to whether Zoho is safe and private.<\/p>\n","protected":false},"author":14,"featured_media":13418,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-13414","is-site-safe","type-is-site-safe","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/is-site-safe\/13414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/is-site-safe"}],"about":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/types\/is-site-safe"}],"author":[{"embeddable":true,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/comments?post=13414"}],"version-history":[{"count":0,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/is-site-safe\/13414\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/media\/13418"}],"wp:attachment":[{"href":"https:\/\/joindeleteme.com\/wp-json\/wp\/v2\/media?parent=13414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}