Security

At Truelist, we take the security of your data seriously. This page outlines the measures we have in place to protect your information.

SOC 2 Type II Certification

Truelist is SOC 2 Type II certified. This independent audit, conducted by a third-party auditor, verifies that our security controls operate effectively over a sustained period — not just at a single point in time. The audit covers five trust service criteria: security, availability, processing integrity, confidentiality, and privacy.

To request our SOC 2 Type II or ISO 27001 report, visit our trust center at trust.inc/truelist.

Data Encryption

  • In Transit: All data transmitted to and from Truelist is encrypted using TLS 1.2 or higher.
  • At Rest: Data stored in our systems is encrypted at rest using industry-standard encryption.

Infrastructure

  • Our services are hosted on Amazon Web Services (AWS) and OVH, leveraging their enterprise-grade security controls.
  • We use isolated network environments and firewalls to protect our infrastructure.
  • Access to production systems is restricted and logged.

Access Controls

  • Employee access to customer data is limited to those who require it to provide support or maintain the service.
  • We use strong authentication mechanisms for all internal systems.

Data Retention

  • Email addresses and validation results are automatically deleted within 60 days of validation.
  • Uploaded lists and result files are removed from your account 35 days after processing finishes, and permanently deleted from storage within 125 days of upload.
  • Backups are overwritten on a rolling cycle of no more than 35 days.
  • Application and access logs, which may contain email addresses, are deleted within 30 days.
  • You can delete your data at any time through your account settings or by contacting us.
  • For more details, see our Automatic Data Cleanup Policy.

Responsible Disclosure

If you discover a security vulnerability, please report it to security@truelist.io. We appreciate responsible disclosure and will work with you to address any issues promptly.

Questions

For security-related questions, contact us at security@truelist.io.