Trust & Security

We strive to meet the highest level of security certification across borders and industries. Our compliance and certification are managed by Oneleet and our incredible audit partners.

SOC 2 Badge

SOC 2 Type 2

We're SOC 2 ready and preparing for audit.

GDPR

We're GDPR compliant. Ask us for our DPA.

CCPA

We're CCPA compliant. Ask us for our DPA.

CASL

We're CASL compliant. Ask us for our DPA.

PIPEDA

We're PIPEDA compliant. Ask us for our DPA.

LGPD

We're LGPD compliant. Ask us for our DPA.

POPIA

We're POPIA compliant. Ask us for our DPA.

PDPA

We're PDPA compliant. Ask us for our DPA.

Trusted by 1,000+ GTM teams

Drive GTM value
(With compliant peace of mind)

We understand the challenging role of Security & Legal professionals in an ever-shifting privacy landscape. We commit to ensuring our customers transparently understand how Vector works.

Vector has a proprietary network of publishers who properly disclose, collect, and share their 1st party data; namely, hashed emails (HEMs) and associated Device Fingerprint information.

When a visitor lands on your site, we only look at Device Fingerprints to determine if an identity can be found in our pre-existing compliantly-sourced identity graph. We eagerly geofence our technology to jurisdictions with implied opt-in (but you can further gate Vector behind a Consent Management Platform).

You do not become a contributing member of the data co-op.

FAQs

Common questions related to security, trust, and compliance.

How do you comply with international data privacy regulations like GDPR?

Vector is geofenced to only operate in the United States. While this doesn't "wash your hands" of responsibility in places with tighter regulations, it drastically reduces risk exposure to subjects in those jurisdictions.

Can individuals opt-out?

Yes, there are two ways for your users to opt-out.

On your end, you can install Vector within a container or Consent Management Platform (CMP) that disables its functionality.

Additionally, individuals can send requests for deletion to security@vector.co.

Do we need to add anything to our Privacy Policy?

Always consult your legal, privacy, and security team, but unless you already have this topic covered, you should consider adding a clause to the affect of:

By accessing or logging into our website, our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We, or our service providers, might then send you communications and marketing materials to these emails or profiles. To opt out of these communications, please email us at security@vector.co.

Can Vector only fire when individuals explicitly opt-in (vs. out)?

Yes, despite Vector already geofencing to jurisdications with implied opt-in, you can increase your security posture my creating explicit opt-in by place Vector inside a container or Consent Management Platform (CMP).

Is Vector geofenced to only fire where compliant?

Yes, Vector will only fire in the United States. To do so, Vector "technically" fires globally to calculate a visitors IP address. This data collection is incidental and for privacy purposes which means no "establishment" is created for "the effective and real exercise of activities through stable arrangements".

What if a non-US resident travels to the US?

This is entirely possible and would make Vector (and you) responsible for protecting the individuals citizenship rights.

To do so, Vector does not build any of its identity graph with information outside of the US. Said differently, it's impossible to enrich a device fingerprint to an individual from a foreign jurisdiction as we don't collect or purchase any non-US data.

Stop getting ghosted with expensive, legacy abm tools

Fill the funnel with high intent contacts, not meaningless accounts