Snapshot 245900
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Great Question Great Question is the only customer research tool you need to recruit participants, conduct research & share what you learn with your team. security@greatquestion.co Compliance SOC 2 Type II SOC 2 Type I GDPR Resources View all Pen Test - 2026 Information Security Policy GDPR Compliance Policy GDPR Incident Response Plan Data Deletion Policy AI Usage Policy Great Question - Data Processing Agreement Password Policy Risk Assessment Program Change Management Policy Controls View all Infrastructure security Encryption key access restricted Unique account authentication enforced Production application access restricted View 12 more Infrastructure security controls Organizational security Asset disposal procedures utilized Portable media encrypted Anti-malware technology utilized View 7 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Vulnerability and system monitoring procedures established View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 26 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established GDPR Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested annually Appoint EU representative View 3 more GDPR controls Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • IaaS Provider: File storage (S3) + RDS United States Hosts the Great Question platform. Stores the production database (RDS) and file uploads, images and CSV imports (S3) for the life of the customer account. Datadog • Monitoring and logging United States Infrastructure monitoring, log storage and APM. No PII is sent; identifiers are scrubbed before ingestion. Logs are retained for a limited period for troubleshooting. Hubspot • Sales tooling (CRM) United States Sales and marketing CRM. Retains prospect contact information for the duration of the sales relationship. Stripe • Payment processing United States Processes subscription payments. Retains payment information and transaction history as required for billing and financial records. FAQ View all