Security and compliance
Secure
by default.
We work inside your CMS, Search Console and analytics, so we treat that access and your data with care.
How we protect your data
Least-privilege access
We ask only for the access the work needs, usually your CMS, Search Console and GA4, and remove it when an engagement ends.
Your data stays yours
Client data is used to run your program. It is never sold, and never used to train any AI model.
DPA and subprocessors
A data processing agreement for every client who needs one, and a public list of the subprocessors we use.
Access controls
Single sign-on and multi-factor authentication on the systems that hold client data.
Vendor review
Every tool that touches client data is reviewed before we use it, and listed as a subprocessor.
Your requests
Ask for an export or deletion of your data at any time, and we will confirm when it is done.
Documents
Security questionnaire, or found a vulnerability? Email security@getpassionfruit.com.