Security & Trust

Enterprise-Grade Security for High-Growth Brands

We take security seriously. Here's exactly how we protect your brand data and maintain your trust.

Enterprise-Grade Security

Built from the ground up with security best practices.

01

Encrypted Data

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your brand data never leaves our secure infrastructure unprotected.

02

Secure Infrastructure

Hosted on enterprise-grade cloud infrastructure with automatic backups, redundancy, and 99.9% uptime SLA.

03

Privacy by Design

We only collect the data necessary to provide our service. No tracking pixels, no selling data to third parties.

04

Compliance Ready

GDPR compliant with data processing agreements available. SOC 2 Type II certification in progress.

Compliance & Certifications

We're committed to meeting the highest standards of data protection.

GDPR Compliant

Compliant

Full compliance with EU data protection regulations

CCPA Compliant

Compliant

California Consumer Privacy Act compliance

...

SOC 2 Type II

In Progress

Certification in progress, expected Q2 2025

HIPAA

Planned

On roadmap for healthcare customers

Data Handling FAQ

Answers to common questions about how we handle your data.

What data do you collect?

We collect brand mentions, citation data, and competitor visibility metrics from ChatGPT responses. We do not collect personal information about ChatGPT users.

How long do you retain data?

Snapshot data is retained for the duration of your subscription plus 30 days. You can request data deletion at any time.

Where is data stored?

All data is stored in secure, SOC 2 compliant data centers in the United States with encryption at rest.

Do you share data with third parties?

Never. Your data is yours. We do not sell, share, or use your data for any purpose other than providing you with Citr's services.

Have Security Questions?

We're happy to discuss our security practices, provide documentation, or complete your vendor security questionnaire.