Security

Security Overview

At ECOMMANALYTICS.COM, security is of utmost importance. We are fully dedicated to safeguarding your data. We follow industry best practices for data encryption, account management, and software architecture.

Furthermore, we respect and adhere to the European Union's General Data Protection Regulations (GDPR). For more details on our GDPR compliance, please consult our Privacy Policy.

Services Overview

ECOMMANALYTICS.COM provides a centralised platform for advertisers to access their advertising data from platforms like Facebook, Pinterest, TikTok, and Google Advertising. Advertisers grant us access to their data through read-only access, and we securely store aggregated and 'report ready' summaries of this data in encrypted data stores hosted by sub-processors. Storing your data enables faster reports, safeguards against outages, and provides longer data retention compared to many advertising platforms. The third-party software that we use to connect your data to Google Cloud, varies depending on the size of your brand and the amount of data you have. Once you have been onboarded, you can request a list of our sub-processors.

Data Ownership

All data collected on behalf of our clients belongs entirely to the clients. Upon client request or service termination, we will permanently delete all client data.

Data Collection, Transfer & Storage

We ensure the complete encryption of third-party data during transit using TLS through our third party softwares. Data remains fully encrypted at rest and does not leave their VPN until it is accessed by the client.

Technology Platform

Our third party softwares use hosting through Google Cloud, adhering to industry-standard security protocols and data privacy best practices. All data is encrypted during transit using TLS and at rest, and it never exits their VPN until it is accessed by the customer.

They employ IAM (Identity and Access Management) with OTP/TOTP methods to prevent unauthorised data access, both from within and outside their organisation.

Regular independent penetration testing is conducted to maintain the security and integrity of our infrastructure and software. Any system updates follow a rigorous change management process, including automated testing, routine code audits, and timely security patches. We consistently monitor system logs for any unusual or anomalous behaviour.

Our third party softwares employ isolation methods to safeguard the privacy of each customer's cloud environment and data. This involves storing each customer's data within a dedicated trust zone, effectively preventing accidental or malicious co-mingling.

To enhance security, all data is encrypted both at rest and during transmission, ensuring that unauthorised access and data breaches are effectively thwarted. They prioritise data isolation by utilising distinct encryption keys for each customer, thereby guaranteeing the protection of their data.

Their data protection measures are in accordance with SOC 2 standards, which ensure encryption of data in transit and at rest, maintaining the security of both customer and company data, as well as sensitive information.

At ECOMMANALYTICS.COM, we implement strict role-based access controls and adhere to the principle of least privileged access. Access permissions are reviewed and revoked as necessary, strengthening data security. For example, in order to further safeguard your data, read-only access to your accounts is only given to our Founder, Clodagh Bell. Our engineers who work on the data, can only access our software that builds your reports, they can’t access your accounts directly. Confidentiality or other types of Non-Disclosure Agreements (NDAs) are signed by all employees, contractors, and others who have a need to access information in order to build the dashboards.

Membership Log-In and Billing

All log-in and billing information are secured using modern SSL encryption. Our log-in software is GDPR, CCPA and SCA compliant.