Enterprise Security
Security That Never Compromises
Built from the ground up with enterprise-grade security. SAML 2.0 SSO, multi-factor authentication, end-to-end encryption, comprehensive audit logs, and full regulatory compliance.
Authentication
Enterprise single sign-on and multi-factor authentication keep unauthorized users out while making access seamless for your team.
SAML 2.0 SSO
Connect with Okta, Azure AD, OneLogin, Google Workspace, and any SAML 2.0 identity provider.
Multi-Factor Authentication
TOTP-based MFA with authenticator app support. Enforced per organization or per role.
API Key Management
Scoped API keys with per-key permissions, rate limits, and usage tracking. Rotate without downtime.
Session Management
Configurable session timeouts, concurrent session limits, and forced logout capabilities.
Data Protection
End-to-end encryption and strict data handling ensure your survey data stays protected at every stage.
Encryption at Rest
AES-256-GCM encryption for all stored data including responses, files, and personally identifiable information.
Encryption in Transit
TLS 1.3 for all API communication. HSTS headers and certificate pinning for mobile SDKs.
Data Residency
Choose where your data is stored to meet regional compliance requirements.
Automatic PII Detection
Identify and flag personally identifiable information in open-text survey responses.
Access Control
Granular role-based permissions ensure team members only access what they need — nothing more, nothing less.
Role-Based Access Control
Pre-built roles (Admin, Editor, Analyst, Viewer) plus custom roles with granular permissions.
Team Management
Organize users into teams with shared surveys, templates, and analytics access.
IP Allowlisting
Restrict access to specific IP addresses or CIDR ranges for sensitive environments.
Feature-Level Gating
Control which features are available per plan, per team, or per user with approval workflows.
Monitoring & Auditing
Complete visibility into every action taken on the platform with real-time threat detection and alerting.
Comprehensive Audit Logs
Every action logged with user, IP address, device, timestamp, and action details. Searchable and exportable.
Security Monitoring
Real-time detection of suspicious activity: brute force attempts, unusual access patterns, privilege escalation.
Security Alerts
Immediate notifications for security events via email, webhook, or in-app alerts.
Activity Reports
Scheduled and on-demand reports for compliance audits and security reviews.
Compliance & Certifications
Built for the Most Regulated Industries
Meet the strictest compliance requirements with built-in regulatory tools and industry certifications.
GDPR
Full compliance with the EU General Data Protection Regulation including DPO support, consent management, right to erasure, and data portability.
TCPA
Telephone Consumer Protection Act compliance for SMS and voice surveys with prior express consent tracking.
CASL
Canadian Anti-Spam Legislation compliance with express consent tracking and unsubscribe management.
Built to align with SOC 2 (Type II) controls
Service Organization Control 2 controls for security, availability, and confidentiality.
HIPAA Ready
Business Associate Agreement (BAA) available for healthcare organizations handling protected health information.
ISO 27001
Information security management aligned with ISO 27001 standards and best practices.
Security You Can Trust
Proactive Monitoring
Our security team monitors threats 24/7 with automated detection and immediate incident response.
Regular Penetration Testing
Third-party penetration testing conducted regularly with full remediation of any findings.
Responsible Disclosure
Bug bounty program and responsible disclosure policy for security researchers.
Enterprise Security, Zero Compromise
Start with our free plan. Upgrade to Business or Enterprise for full security features.