Snapshot 223408
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Solutions
Who we Help
Resources
Company
Log in
Talk to an Expert
Solutions
+
−
Advisory Solutions
Compliance Readiness
Audit prep with a 100% certification success rate.
Data Privacy Compliance
GDPR, CCPA, and state privacy compliance support.
Internal Audit
Independent ISO 27001 and SOC 2 internal audits.
vCISO
Executive security leadership without a full-time hire.
FedRAMP 20x
Get SOC 2, GovRAMP, and Rev5 programs ready for FedRAMP 20x.
AI Risk Management Services
NIST AI RMF, ISO 42001, and EU AI Act readiness.
Cybersecurity Risk Assessment Service
Pinpoint vulnerabilities with clear, expert risk reporting.
Cyber Due Diligence
Independent cyber risk reads for M&A and PE.
Documentation Support
Audit-ready policies, procedures, and control documentation, written for how you actually operate.
Policy & Controls Implementation
Put the controls behind your policies into operation — with the evidence to prove it.
Tabletop Exercises
Practitioner-facilitated IR, BCDR, and custom scenarios that test your plans before a real event does.
Cybersecurity Solutions
Penetration Testing
Practitioner-led, PTES and OWASP-aligned penetration testing.
Vulnerability Assessment Service
Network, cloud, and web app vulnerability scanning.
Social Engineering
Phishing and vishing tests of employee susceptibility.
Red Teaming
Real-world adversary simulation across people and tech.
Managed Programs
Managed Compliance Program
Year-round compliance posture and audit support.
Managed Pen Test Program
Recurring expert-led testing, not annual point-in-time.
Managed Security Training Program
Science-based awareness training and phishing simulations.
Managed VM Program
Continuous vulnerability discovery, prioritization, and remediation.
Managed SOC Program
Human-validated detection and response across endpoints, identities, and logs.
Who We Help
+
−
SaaS
Get SOC 2 certified faster and win enterprise deals.
Healthcare
HIPAA and security built for healthcare growth.
Financial Services
PCI DSS, SOC 2, and multi-framework compliance.
AI-Powered Companies
ISO 42001 and EU AI Act governance for AI.
Defense Contractors
CMMC 2.0 certification for DoD contractors.
Resources
+
−
Blog
Insights on security, compliance, and risk.
Case Studies
How real teams achieved compliance with Trava.
Articles
Guides and deep dives on security topics.
ROI Calculator
Estimate the ROI of your security program.
Company
+
−
About Us
Security practitioners building for growing teams.
Partners
Our platform and audit partner ecosystem.
Contact
Get in touch with our security team.
Trust Center
View Trava's security and compliance posture.
Log inTalk to an Expert
Advisory Solutions
Cybersecurity Solutions
Managed Programs
Compliance Readiness
Audit prep with a 100% certification success rate.
Data Privacy Compliance
GDPR, CCPA, and state privacy compliance support.
Internal Audit
Independent ISO 27001 and SOC 2 internal audits.
vCISO
Executive security leadership without a full-time hire.
FedRAMP 20x
Get SOC 2, GovRAMP, and Rev5 programs ready for FedRAMP 20x.
AI Risk Management Services
NIST AI RMF, ISO 42001, and EU AI Act readiness.
Cybersecurity Risk Assessment Service
Pinpoint vulnerabilities with clear, expert risk reporting.
Cyber Due Diligence
Independent cyber risk assessments for M&A and PE.
Documentation Support
Audit-ready policies, procedures, and control documentation, written for how you operate.
Policy & Controls Implementation
Put the controls behind your policies into operation — with the evidence to prove it.
Tabletop Exercises
Practitioner-facilitated IR, BCDR, and custom scenarios that test your plans before a real event does.
Penetration Testing
Practitioner-led, PTES and OWASP-aligned penetration testing.
Vulnerability Assessment Service
Network, cloud, and web app vulnerability scanning.
Social Engineering
Phishing and vishing tests of employee susceptibility.
Red Teaming
Real-world adversary simulation across people and tech.
Managed Compliance Program
Year-round compliance posture and audit support.
Managed Pen Test Program
Recurring expert-led testing, not annual point-in-time.
Managed Security Training Program
Science-based awareness training and phishing simulations.
Managed Vulnerability Management Program
Continuous vulnerability discovery, prioritization, and remediation.
Managed SOC Program
Human-validated detection and response across endpoints, identities, and logs.
Who We Help
Security and compliance tailored to your industry and stage of growth.
View all industries
SaaS
Get SOC 2 certified faster and win enterprise deals.
Healthcare
HIPAA and security built for healthcare growth.
Financial Services
PCI DSS, SOC 2, and multi-framework compliance.
AI-Powered Companies
ISO 42001 and EU AI Act governance for AI.
Defense Contractors
CMMC 2.0 certification for DoD contractors.
Learn with Trava
Resources to help you stay ahead of evolving threats and compliance.
See All Resources
Blog
Insights on security, compliance, and risk.
Case Studies
How real teams achieved compliance with Trava.
Articles
Guides and deep dives on security topics.
ROI Calculator
Estimate the ROI of your security program.
About
Built by security practitioners for security teams.
About Us
Security practitioners building for growing teams.
Partners
Our platform and audit partner ecosystem.
Contact
Get in touch with our security team.
Trust Center
View Trava's security and compliance posture.
Trava Security Privacy Policy
Effective date: June 29, 2026 | Last updated: June 29, 2026
Trava Security, Inc. ("Trava," "we," "us," or "our") is committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy describes what information we collect, why we collect it, how we use and protect it, and what rights you have over it.
This policy applies to travasecurity.com and its sub-domains (collectively, "Site"). It does not apply to third-party websites or services we may link to. References to "you" mean any visitor or user of the Site.
We are the data controller of the personal information collected through our Site. Our contact details are set out at the end of this policy.
1. Website Visitors
Like most website operators, Trava collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Trava's purpose in collecting non-personally identifying information is to better understand how Trava's visitors use its website. From time to time, Trava may release non-personally-identifying information in the aggregate (e.g., by publishing a report on trends in the usage of its website).
Trava also collects potentially personally-identifying information like Internet Protocol (IP) addresses. Trava does not use IP addresses to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personally-identifying information, as described below.
2. Gathering of Personally Identifying Information
Certain visitors to Trava choose to interact with Trava in ways that require Trava to gather personally-identifying information. The amount and type of information that Trava gathers depends on the nature of the interaction.
In each case, Trava collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor's interaction with Trava. Trava does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
All of the information that is collected on Trava will be handled in accordance with GDPR legislation to the best of our ability.
3. Protection of Certain Personally Identifying Information
Trava discloses potentially personally-identifying and personally-identifying information only to those of project administrators, employees, contractors, and affiliated organizations that (i) need to know that information in order to process it on Trava's behalf or to provide services available through Trava, and (ii) that have agreed not to disclose it to others.
Some of those employees, contractors, and affiliated organizations may be located outside of your home country. Where personal data is transferred internationally — including to the United States — we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally recognised transfer mechanisms. See the "International Data Transfers" section below for more detail.
Trava will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to project administrators, employees, contractors, and affiliated organizations, as described above, Trava discloses potentially personally-identifying and personally-identifying information only when required to do so by law, if you give permission to have your information shared, or when Trava believes in good faith that disclosure is reasonably necessary to protect the property or rights of Trava, third parties, or the public at large.
If you are a registered user of a Trava website and have supplied your email address, Trava may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what's going on with Trava and our products. We primarily use our blog to communicate this type of information, so we expect to keep this type of email to a minimum.
If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Trava takes all measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of potentially personally-identifying and personally-identifying information.
4. Use of Personal Information
We use the information you provide to register for an account, attend our events, receive newsletters, use certain other services, or participate in open source projects in any other way.
We will not sell or lease your personal information to third parties unless we have your permission or are required by law to do so.
We would like to send you email marketing communication which may be of interest to you from time to time. If you have consented to marketing, you may opt out later.
You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please click on the unsubscribe link at the bottom of the email.
5. Legal Grounds for Processing Personal Information
We rely on one or more of the following processing conditions:
our legitimate interests in the effective delivery of information and services to you;
explicit consent that you have given;
legal obligations.
6. Retention of Personal Information
We will retain your personal information on our systems only for as long as we need to, for the programs that support Trava. As a general guide:
Contact and marketing data (such as mailing list information) is retained until you unsubscribe or request deletion, after which we may keep a suppression record for up to 12 months to honour your opt-out.
Customer account data is retained for the duration of our relationship and for a reasonable period afterward to meet legal and contractual obligations — typically up to 7 years.
Website enquiry and lead data is generally retained for up to 3 years from last contact.
Financial and billing records are retained for 7 years in accordance with applicable tax and accounting requirements.
If you choose to unsubscribe from a mailing list, we may keep certain limited information about you so that we may honor your request.
7. Rights in Relation to Your Information
You may have certain rights under data protection law in relation to the personal information we hold about you. In particular, you may have a right to:
request a copy of personal information we hold about you;
ask that we update the personal information we hold about you, or independently correct such personal information that you think is incorrect or incomplete;
ask that we delete personal information that we hold about you from live systems, or restrict the way in which we use such personal information (for information on deletion from archives, see the "Retention of Personal Information" section);
object to our processing of your personal information; and/or
withdraw your consent to our processing of your personal information (to the extent such processing is based on consent and consent is the only permissible basis for processing).
lodge a complaint with your local data protection authority if you believe we have not handled your personal information in accordance with applicable law.
If you are a California resident, you may also have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and share, the right to request deletion, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise any California privacy rights, please contact us at marketing@travasecurity.com.
If you would like to exercise any of the rights above or understand if these rights apply to you, please contact us at marketing@travasecurity.com.
8. Third-Party Links
Our Site may contain links to other websites provided by third parties not under our control. When following a link and providing information to a third-party website, please be aware that we are not responsible for the data provided to that third party. This privacy policy only applies to the websites listed at the beginning of this document, so when you visit other websites, even when you click on a link posted on Trava, you should read their own privacy policies.
9. Cookies
Additionally, information about how you use our Site is collected automatically using "cookies". Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
For full details on the types of cookies we use, how consent is managed, and how to update your preferences, please see our Cookie Policy at travasecurity.com/cookie-policy.
10. Third-Party Partners
Our site uses technologies of third-party partners to help us recognize your device and understand how you use our site(s) so that we can improve our services to reflect your interests and serve you advertisements about the products and/or services that are likely to be of more interest to you. Specifically, these partners collect information about your activity on our site(s) to enable us to:
measure and analyze traffic and browsing activity on our site(s);
show advertisements for our products and/or services to you on third-party sites.
Opting Out
Our partners may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit you to block such technologies. For this reason you can use the following third party tools to decline the collection and use of information for the purpose of serving you interest based advertising:
The NAI's opt-out platform: http://www.networkadvertising.org/choices/
The EDAA's opt-out platform: http://www.youronlinechoices.com/
The DAA's opt-out platform: http://optout.aboutads.info/?c=2&lang=EN
11. Privacy Policy Changes
Although most changes are likely to be minor, Trava may change its Privacy Policy from time to time. Trava encourages visitors to frequently check this page for any changes to its Privacy Policy. Where changes are material, we will update the "Last updated" date at the top of this page and, where required by applicable law, notify you directly or seek your explicit acknowledgement.
12. Contact
If you have questions about this Cookie Policy or wish to exercise your privacy rights, please contact us:
Trava Security, Inc.
830 Massachusetts Avenue, Suite 1500, Floor 3
Indianapolis, IN 46204, USA
Email: marketing@travasecurity.com
Website: https://www.travasecurity.com/
Sign up for our newsletter
Sign up
Company
About TravaPartnersResources
Who We Help
SaaSHealthcareFinancial ServicesAI-Powered CompaniesDefense Contractors
Solutions
AdvisoryCybersecurityManaged ProgramsPlatform
830 Massachusetts Ave
Suite 1500 Floor 3
Indianapolis, IN 46204
Site by Five Four
LegalPrivacy policyCookie policyTrust centerFor AI assistants
©2026 Trava Security, Inc. All rights reserved.