Security statement
Last updated 7 November 2026
We buy traffic for a living, so we treat the platforms behind it as part of the campaign. This statement describes how we protect client data and the systems we operate.
The client vault
Case studies, benchmarks and playbooks in the vault are available only to signed-in client accounts. Accounts are issued to named contacts, sessions are encrypted in transit, and two-factor authentication is available on every account.
Infrastructure practice
Production systems run on cloud providers with least-privilege access, network segmentation, encrypted backups and a web application firewall. Auto-scaling and load rehearsals run ahead of any large media push.
Testing
Client-facing infrastructure we operate is penetration tested at least quarterly, and monitoring alerts on anomalies in traffic, login behaviour and payment patterns.
Incident response
If an incident affects client data, we notify affected clients without undue delay, alongside the assessment and remediation steps. Where the law requires it, regulators are notified within 72 hours.
Responsible disclosure
If you believe you have found a vulnerability in this site, tell us through the diagnostic form with enough detail to reproduce it. We will acknowledge it within two working days.