—Security
Built for sensitive raise data
Campaign data includes investor relationships, messaging, and traction metrics. We treat it accordingly.
Encryption
- TLS 1.3 in transit for all API and dashboard traffic
- AES-256 encryption at rest for campaign and contact data
- Encrypted backups with 30-day retention
Access control
- Role-based access for team members
- SSO available on Full Service engagements
- Audit log for campaign configuration changes
Email infrastructure
- SPF, DKIM, and DMARC configuration on your domain
- Send volume throttling to protect deliverability
- Bounce and complaint monitoring
Data handling
- Campaign data not sold to third parties
- Data deletion on request within 30 days of campaign close
- US-based infrastructure (AWS us-east-1)
—Compliance
Certification status
| Standard | Status | Target |
|---|---|---|
| SOC 2 Type I | In progress | Q3 2026 |
| GDPR | Compliant | — |
| CAN-SPAM | Compliant | — |
Questions? security@capsignal.com