Security
Trust & Security
Documented privacy controls, consent-forward architecture, and transparent data governance, built into every layer of the platform.
Certifications
Compliance You Can Verify
SOC 2 in progress
Our security, availability, and confidentiality controls are documented and monitored continuously, and are being prepared for independent audit. We have not completed one yet, and we will not say otherwise until we have.
GDPR Programme
A completed data protection impact assessment, and data subject rights you can exercise directly from this site.
CCPA and CPRA Rights
Submit opt-out, access, correction, or deletion requests through our privacy form. Site consent choices and browser opt-out preference signals are recorded by our consent controls.
Deterministic Data
Deterministic matches only, built from first-party and licensed sources. Opt-outs are enforced at serving time.
Data Subject Request (DSR)
Exercise your data rights under GDPR, CCPA, and other privacy regulations. Request access, correction, or deletion of your personal data.
Data Architecture
Identity data is encrypted at rest and in transit, and access to customer data is restricted by workspace.
- AES-256 encryption at rest
- TLS 1.2 or higher for all data in transit
- Customer data logically separated per workspace
- Access to customer data restricted to workspace members
Consent Framework
Delivr.ai is consent-forward by design. Opt-outs are honoured across resolution and serving.
- Consent-forward architecture
- Consumer opt-out honored across all channels
- Browser opt-out preference signals recognised, including Global Privacy Control
- Suppression list support for email and phone
Privacy Request Intake
Privacy requests can be submitted through our web form and tracked in Concord.
- Web form intake for access, correction, deletion, and opt-out requests
- Request IDs and status timestamps tracked in Concord
- Consent preferences captured through this site
Infrastructure Security
Platform runs on hardened infrastructure with continuous monitoring, automated vulnerability scanning, and incident response procedures.
- AWS infrastructure with VPC isolation
- Continuous vulnerability scanning
- Automated intrusion detection
- 24/7 security monitoring
- Documented incident response playbook
