Data protection
- Data is stored in Europe: the database in London and the website in Stockholm
- Encryption in transit (HTTPS with HSTS), and emails and other sensitive fields are stored encrypted
- Two-step verification for all business owners
- Staff only have access to what they need
Certifications
GDPR
Data processing agreement on request
DSA
Complies with the Digital Services Act
Pentest
Planned before launch
Responsible disclosure
If you've found a vulnerability, write to security@trustsays.com. We'll confirm within 2 working days.
Do
- Give us reasonable time to fix the issue
- Describe how the issue can be reproduced
- Use your own test account
Don't
- Access or change other people's data
- Attacks that slow the service down
- Social engineering of our staff
Bug bounty
Coming soon. A reward programme is on its way.
Contact
The security team: security@trustsays.com. The contact details are also at trustsays.com/.well-known/security.txt.
Was this page helpful? Contact us