Snapshot 2794
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Overview Validity’s platform helps organizations trust their data, marketing campaigns, and customer communications. We believe the best way to earn trust is through transparency and by demonstrating that we follow the practices we advocate. That’s why we take a security-first approach in everything we do. From securing our cloud infrastructure to monitoring systems and maintaining compliance under SOC 2 and ISO 27001 frameworks, security and privacy are core values that guide our business. This Trust Center provides resources and artifacts to show how we protect data, maintain compliance, and uphold privacy standards. For any questions not addressed here, please contact us via the help section at the bottom of this page. Compliance CCPA EU-US DPF GDPR ISO/IEC 27001 ISO/IEC 27701 Microsoft SSPA SOC 2 Type 2 Standard Contractual Clause (SCC) Validity Engage Validity Engage Pre-NDA FAQ Validity Engage Security White Paper Validity Engage - ISO 42001 Letter of Engagement BriteVerify BriteVerify Pre-NDA Security FAQ BriteVerify Security White Paper SOC 2 Type 2 report View more DemandTools DemandToolsV Security FAQ DemandToolsV Security White Paper DemandToolsV PenTest LoA View more Everest Everest Pre-NDA Security FAQ Everest Security White Paper SOC 2 Type 2 report View more GridBuddy Connect GridBuddy Pre-NDA Security FAQ GridBuddy Connect Security White Paper GridBuddy Connect PenTest LoA View more Litmus Litmus Security White Paper Litmus SOC 2 Type 2 report SOC2 Bridge Letter View more Mailcharts MailCharts Security White Paper MailCharts PenTest LoA MailCharts VPAT report ISO 27001 & 27701 ISO 27001 & 27701 certificate ISO 42001 Letter of Engagement Access Control We maintain a rigorous, policy‑driven access control program designed to ensure that only authorized personnel can access our systems and data. All access is provisioned based on least privilege, continuously reviewed, and monitored for adherence to security and compliance requirements. We are happy to provide additional details about our access control practices upon request. App Security Application Penetration Testing Secure Development Training Software Bill of Materials (SBOM) View more Corporate Security We maintain a strong Corporate Security program designed to protect our people, facilities, and internal operations. Our controls include secure facility access management, employee background verification, mandatory security awareness training, and clear policies governing safe and responsible workplace practices. Our Corporate Security standards are continuously reviewed and strengthened to align with evolving threats and industry best practices. Additional details about our internal security measures are available upon request. Data Privacy Privacy Policy Data Processing Addendum Subprocessors View more Data Security Data Erasure Encryption-at-rest Encryption-in-transit Endpoint Security Anti-Malware Disk Encryption DNS Filtering View more Infrastructure We leverage best‑in‑class, security‑focused infrastructure providers to deliver highly reliable and protected computing and storage environments. Our DevSecOps implementation includes rigorous physical, network, and operational safeguards, enabling us to maintain strong security, availability, and resilience across our services. We are happy to provide additional details about our infrastructure and supporting controls upon request. Legal Terms of Service Validity Certificate of Good Standing Data Processing Agreement View more Network Security We maintain a defense‑in‑depth network security architecture designed to protect our corporate and cloud environments from both external and internal threats. Our cloud infrastructure leverages native security controls to enforce strict segmentation, minimize exposure, and provide continuous threat monitoring. These controls are supplemented with centralized logging, intrusion detection capabilities, and automated alerting to ensure rapid detection and response. We are happy to provide additional details about our network security practices upon request Policies We maintain a comprehensive Information Security Management System (ISMS) built on internationally recognized standards, including ISO 27001, ISO 27701, and the AICPA SOC 2 Trust Services Criteria. Our policies are developed in partnership with security and compliance experts to ensure they align with industry best practices and regulatory requirements. The ISMS provides formal governance over security, privacy, risk management, and operational controls to protect our systems and data throughout their lifecycle. We are happy to provide additional details about our policy framework and supporting processes upon request. Product Security We design our products with security and privacy as core principles, incorporating enterprise‑grade capabilities such as granular access control, single sign‑on (SSO), and robust authentication and authorization mechanisms. Each product undergoes rigorous security reviews throughout its development lifecycle to ensure resilience, privacy, and compliance with industry best practices. Detailed information about the specific security features available in each offering can be found directly within the corresponding product card. Documents VALIDITY ENGAGEValidity Engage - ISO 42001 Letter of Engagement VALIDITY ENGAGEValidity Engage Pre-NDA FAQ VALIDITY ENGAGEValidity Engage Security White Paper LEGALCyber Insurance LEGALValidity Certificate of Good Standing MAILCHARTSMailCharts PenTest LoA MAILCHARTSMailCharts Security White Paper MAILCHARTSMailCharts VPAT report BRITEVERIFYBriteVerify PenTest LoA BRITEVERIFYBriteVerify Pre-NDA Security FAQ BRITEVERIFYBriteVerify Security White Paper BRITEVERIFYBriteVerify SIG Lite Knowledge Base (FAQ) What is Validity's change management procedure? What encryption and data retention methods are in place? Are personnel non-disclosure and confidentiality agreements in place? Is there a management oversight process covering all security and privacy matters? What are Validity's physical and operational controls? View more Trust Center Updates New SOC 2 reports and ISO certificate Compliance Greetings, We are excited to share that Validity has successfully completed its annual compliance audits—reinforcing our continued commitment to security, trust, and transparency. This year, Schellman conducted SOC 2 Type II audits for BriteVerify, Everest, and Litmus, all of which were completed with no exceptions. In addition, we completed our annual ISO audit, which covers al of our main products. We are proud to announce that the Litmus SaaS product is now formally included in Validity’s ISO certification. These milestones reflect our ongoing investment in rigorous security and compliance practices across our full product portfolio—so our customers can continue to rely on Validity with confidence. Thank you, Validity Security Team If you need help using this Trust Center, please contact us. Contact support