Trust & Security

eEndorsements is built to keep your customers' reviews, contacts, and survey responses safe. This page describes how — honestly, with no aspirational claims.

What we collect

Account information for the people who use eEndorsements (your team), plus the contacts and reviews your business asks us to manage on your behalf. We process this data so we can do the job you hired us for, and for nothing else.

Where to learn more

Security controls

Authentication, encryption, audit logging, application security, and the rest of what's on under the hood.

Compliance posture

PCI SAQ-A, HIPAA technical safeguards, GDPR/CCPA, CAN-SPAM & TCPA, and our SOC 2 status.

Subprocessors

Every third party that handles customer data on our behalf, with purpose, hosting region, and BAA status.

Privacy

How we handle data subject requests, retention, and the short version of our privacy practices.

Reporting a security issue

If you believe you've found a vulnerability, please email security@eendorsements.com. We acknowledge reports within five business days and follow a 90-day coordinated-disclosure window. Full details are in our security.txt and SECURITY.md.