What we process
Customer account data and public (or otherwise lawfully accessible) social listening data customers configure for brand monitoring. No private inbox interception or closed-group claims.
Trust
Security for social listening data — without theatre
Brand254 media monitoring should be boring about security. This page lists practices we intend to operate — and the certifications we will not invent.
Controls we intend to run
- HTTPS for the website and, when live, the application.
- Encryption in transit for API traffic.
- Least-privilege access to production systems and customer workspaces.
- Authentication and, on Enterprise, SSO as a contracted capability.
- Logging and backup practices appropriate to a SaaS workspace.
- Processor contracts with infrastructure and, if used, model providers.
What we will not claim yet
We do not list SOC 2, ISO 27001, penetration-test logos or uptime percentages here because those artefacts are not published. When they exist, they should be linked with dates — not implied by a badge pack.
Vulnerability reports
If you believe you have found a security issue in the public website or product, email [email protected] with enough detail to reproduce it. Do not include customer data in the report.
Also see the privacy notice.
Brand254
Evaluating Brand254 as a vendor?
Talk to sales about Enterprise controls, or start a 14-day trial to explore social listening and media monitoring.