Snapshot 2928
Normalized text
Scripts and page chrome removed; this is what change detection compares.
GetResponse Security Protecting Your Data at Every Step At GetResponse, the security and privacy of your data are foundational to everything we build. Our customers trust us with their business-critical information — and we take that responsibility seriously. That’s why we maintain a multilayered security program designed to safeguard data, ensure platform resilience, and meet globally recognized compliance standards. Industry-Recognized Standards & Certifications We align our security program with leading international frameworks and undergo regular, independent validation of our controls. Vendor & Third-Party Risk Management We assess the security posture of all vendors and subprocessors before onboarding, and we continually monitor them for ongoing compliance. We evaluate: - Data protection practices - Security certifications - Hosting locations and privacy commitments - Incident response processes - Contractual safeguards Secure Infrastructure & Access Controls GetResponse infrastructure is designed with strong, layered security controls: Strict role-based access control (RBAC) ensures users and employees can only access what they need — nothing more. Zero-trust principles govern internal systems and privileged operations. Multi-factor authentication (MFA) is enforced across sensitive environments. Production and corporate environments are segregated to minimize risk. All changes in production undergo code review, automated testing, and secure deployment pipelines. Provide detailed information so that we can replicate the problem. PCI DSS Certification GetResponse is PCI DSS certified, demonstrating that we meet stringent requirements for protecting payment data and maintaining secure systems and processes. This certification covers: - Secure handling of cardholder data - Dtrong access control measures - Continuous monitoring and testing of networks - Formalized risk and security management processes GDPR & Global Privacy Compliance We are fully compliant with the GDPR and follow established privacy regulations worldwide. Our data processing agreements, records of processing, and privacy workflows ensure transparent, lawful, and responsible handling of personal data. Strong Data Protection: Encryption at Every Layer Your data is fully encrypted both in transit and at rest using modern, industry-standard cryptography: - TLS 1.2+ encryption protects all data transmitted between your device and our systems. - AES-256 encryption secures stored data, including backups and logs. - Encryption keys are centrally managed and periodically rotated as part of our secure-by-design approach. No unencrypted customer data is ever transferred or stored within our infrastructure. Proactive Security Testing & Continuous Monitoring We operate on the principle of continuous improvement, ensuring our defenses evolve alongside the threat landscape. Regular Penetration Testing We conduct both: - Independent external penetration tests performed by certified third-party security specialists, and - regular internal security testing carried out by our own Security team. Findings are tracked, prioritized, and remediated according to our strict vulnerability management policy (including 7-day SLAs for critical issues). Continuous Monitoring Our Security Operations Center (SOC) continuously monitors systems for threats, suspicious activity, anomalies, and potential vulnerabilities. We use advanced detection tools, logging pipelines, and automated alerting to ensure rapid response. Reliability & Business Continuity We maintain a robust program for ensuring platform availability and resilience: - Redundant infrastructure across independent environments - Regular backups and disaster recovery testing - 24/7 platform monitoring - Documented business continuity plans aligned with global standards Our goal is simple — ensure you can rely on GetResponse whenever your business needs it. GetResponse participates in the following email industry organizations and initiatives: Your Security Is Our Priority Security is not a feature — it’s an essential part of the GetResponse platform. We continuously invest in our security program, technologies, and people to stay ahead of emerging threats and deliver a trustworthy environment for your marketing operations.If you have any questions or need additional documentation (e.g., PCI DSS Certificate, Data Processing Agreement, pentest summary, SOC2-related materials), email us. Our team is here to help.