Our Data Security Commitment

At SCORE Metrics, we understand that your customer data is one of your most valuable assets. That's why we've built our platform with data security and privacy at its core. Our "Security by Design" approach means data protection is built into the very architecture of our system—not added as an afterthought.

We handle your customer feedback with the utmost care and maintain rigorous security standards that exceed industry requirements. From encryption to access controls, every aspect of our system is designed to keep your data secure.

Why Data Security Matters for SCORE Metrics

Your SCORE Metrics surveys collect valuable competitive intelligence about your brand's position. This data requires particular protection because:

  • It contains insights about your competitive market position
  • It includes customer contact information
  • It generates strategic decision-making information
  • It may reveal business strengths and areas for improvement

Key Security Features

🔒

GDPR Compliance Framework

Our system is built to comply with the General Data Protection Regulation (GDPR), ensuring your customer data is handled according to the strictest privacy standards in the world.

We maintain detailed data processing records and can provide documentation to support your own GDPR compliance efforts.

🛡️

Data Protection by Design

Security isn't an add-on—it's built into the foundation of SCORE Metrics. Every feature is designed with data protection in mind from the earliest stages of development.

We employ industry-leading security practices including strong encryption, secure access protocols, and regular security audits.

⏱️

Data Retention Controls

You control how long your data is kept. Our system includes customizable data retention policies that automatically purge old data according to your specifications.

This reduces your compliance burden and ensures you're not storing sensitive data longer than necessary.

📋

Rights Management Process

We make it easy for you to fulfill data subject rights requests. Our comprehensive system helps you respond to customers who want to access, correct, or delete their personal data.

This streamlined process reduces administrative overhead while ensuring regulatory compliance.

How We Protect Your Data

Technical Security Measures

  • Encryption - All data is encrypted both in transit and at rest using industry-standard protocols
  • Access Controls - Strict role-based access controls ensure only authorized personnel can access your data
  • Regular Backups - Automated, encrypted backups protect against data loss
  • Security Monitoring - 24/7 monitoring for suspicious activities or unauthorized access attempts
  • Regular Audits - Periodic security audits and vulnerability assessments

Data Rights Process

SCORE Metrics helps you honor your customers' data rights with a streamlined process:

  1. Request Intake - Customer requests regarding their data are securely documented
  2. Authentication - The identity of the requestor is verified to prevent unauthorized access
  3. Assessment - The request is evaluated against applicable regulations
  4. Action - Appropriate action is taken (data access, correction, deletion, etc.)
  5. Documentation - The request and resolution are documented for compliance purposes
  6. Communication - The customer is notified of the outcome

Data Retention Policy

Our flexible data retention framework allows you to:

  • Set custom retention periods for different types of data
  • Automatically anonymize personal information after a specified period
  • Schedule regular data purges of outdated information
  • Maintain compliance with regulatory requirements
  • Generate data retention documentation for audits

Standard retention for basic SCORE Metrics projects is 24 months, with options for shorter or longer periods based on your specific needs.

Ready to securely measure your competitive position?

Start Your SCORE Metrics Project

Data Security FAQ

Where is our customer data stored?
All SCORE Metrics data is stored in secure, SOC 2 compliant data centers located in the United States. For clients with specific regional requirements, we offer options for EU-based data storage to facilitate GDPR compliance.
Who has access to our customer data?
Access to your data is strictly limited to authorized personnel who need it to provide the service. All access is logged and monitored. Your dedicated account team will have access to provide support, but all employees are bound by strict confidentiality agreements.
What happens to our data when we're done with a project?
By default, your project data is retained for 24 months to allow for trend analysis. After this period, personal data is automatically anonymized. You can request earlier deletion or extended storage as needed. When you terminate service, we provide a complete export of your data and then securely delete it from our systems according to our data deletion protocol.
How does SCORE Metrics help with our GDPR compliance?
SCORE Metrics serves as a data processor under GDPR, and our systems are designed to help you (as the data controller) meet your obligations. We provide data processing agreements, documentation of security measures, capabilities to fulfill data subject rights requests, and data breach notification protocols.
Has SCORE Metrics ever experienced a data breach?
No. Security is foundational to our business, and we maintain rigorous protections to safeguard your data. We regularly conduct penetration testing and security audits to identify and address potential vulnerabilities before they can be exploited.