Plain-English answers to the questions our customers ask before they trust us with their brand data.
All traffic is served over TLS 1.2+. Database volumes are encrypted at rest. API keys for AI engines are stored in environment variables and never logged.
Free scan data is purged after 7 days. Paid plan data is retained for the lifetime of the account and deleted within 30 days of cancellation.
EU and UK residents can request data export or deletion at any time. We honor DSAR requests within 30 days. Standard Contractual Clauses are in place for cross-border transfers.
Production runs on a managed PostgreSQL provider with automated backups, point-in-time recovery, and isolated networks. No production access for engineers without audit logs.
We do not use customer prompts, responses, or reports to train any model. Paid AI engine providers (OpenAI, Anthropic, Google) operate under their own zero-retention agreements with us.
Found a vulnerability? Email security@brandcitation.com. We acknowledge within 48 hours and triage within 5 business days.
We publish every milestone. Public trust report ships with the SOC 2 Type I in Q3 2026.
Q2 2026
GDPR data processing agreement (DPA) live
Q4 2026
Single sign-on (SSO) for larger teams
Q3 2026
SOC 2 Type I audit
Q4 2026
SOC 2 Type II audit
Q1 2027
Custom data residency for larger teams
We share this list publicly. Email privacy@brandcitation.com to be notified of changes.
| Purpose | Provider | Region |
|---|---|---|
PostgreSQL hosting Primary database | Self-hosted on Hetzner / DigitalOcean | EU + US |
Redis hosting Job queue, rate limiting, session cache | Upstash | Global edge |
Transactional email (signup, audit delivery, billing) | Resend | US |
Payments Subscription billing | Polar | EU |
AI engines Run AI visibility prompts | OpenAI, Anthropic, Google, Perplexity | US + EU |
Auth Session and account management | Better Auth | Self-hosted |
No. We never use customer data to train any model. Our AI engine providers operate under zero-retention agreements.
Free scan data: 7 days. Paid plan data: lifetime of the account, plus 30 days after cancellation. After that, it is permanently deleted.
Reports can be saved or printed from the browser. CSV export is available where the dashboard exposes tables, and full account data exports can be handled by request.
Currently in EU and US regions. Custom data residency for larger teams is on our Q1 2027 roadmap.
Not yet. SOC 2 Type I is on our Q3 2026 roadmap. Type II by Q4 2026. We will publish a public trust report once certified.
Larger teams can request a signed Data Processing Agreement, custom security questionnaires, and redlined MSA.
Contact Security Team