SECURITY & COMPLIANCE
Enterprise-grade security at every layer. We protect your data and your clients' data with the same rigour we bring to growing your business.
How we protect your data
All data at rest and in transit is encrypted with military-grade AES-256 encryption. Credentials stored in our vault never exist in plain text.
Our infrastructure and processes are designed to meet SOC 2 Type II standards for security, availability, and confidentiality.
Full compliance with EU data protection regulations. Data processing agreements, consent management, and right-to-erasure built in.
Quarterly penetration testing and continuous vulnerability scanning. We fix issues before they become threats.
Mandatory 2FA for all team accounts. SSO integration available for enterprise clients via SAML and OAuth.
Six granular permission levels ensure every user sees only what they need. Admin, Account Manager, Media Buyer, Creative, Freelancer, and Client.
Data handling
Your data is stored in EU-based data centres (London and Ireland) with automatic failover and geographic redundancy.
Data is retained for the duration of your engagement plus 90 days. Full deletion available on request within 30 days of contract end.
Daily encrypted backups with 30-day rolling retention. Point-in-time recovery available within 24 hours.
Client data protection
Your clients' ad account credentials, API keys, and access tokens are stored in an encrypted vault with access logs for every view and use. Only authorised team members can access credentials, and one-click revocation is available if a team member leaves.
We are happy to walk you through our security practices in detail. Book a discovery session or request our security documentation.