Security & trust
How is your data handled?
Your research data is encrypted in transit and at rest, stored in the region you choose, and never used to train models or sold. This page documents exactly how.
Encryption in transit & at rest Regional data residency SSO / SAML Audit logging
Data protection
- TLS 1.2+ in transit, AES-256 at rest
- Choose EU or US data region
- Never used to train models, never sold
Access & identity
- SSO / SAML on Business+
- Role-based permissions & groups
- Member activity & audit log
Reliability
- 99.9% uptime target
- Automated daily backups
- Public status page
Privacy & compliance
- GDPR-aligned, DPA available
- Respondent unsubscribe & deletion
- Configurable data retention
Application security
- Independent penetration testing
- Least-privilege internal access
- Vulnerability disclosure program
Your control
- Export or delete data anytime
- Per-survey sharing controls
- No respondent panel · your audience only
Subprocessors
| Provider | Region | Purpose |
|---|---|---|
| Cloud hosting | EU / US | Infrastructure |
| Email delivery | US | Campaign sending |
| Error monitoring | EU | Reliability |
| AI provider | US | AI features (opt-in) |
Last updated 2026-05-30 · download the full DPA →