Trust & Security
We strive to meet the highest level of security certification across borders and industries. Our compliance and certification are managed by Oneleet and our incredible audit partners.
SOC 2 Type 2
We're SOC 2 ready and preparing for audit.
GDPR
We're GDPR compliant. Ask us for our DPA.
CCPA
We're CCPA compliant. Ask us for our DPA.
CASL
We're CASL compliant. Ask us for our DPA.
PIPEDA
We're PIPEDA compliant. Ask us for our DPA.
LGPD
We're LGPD compliant. Ask us for our DPA.
POPIA
We're POPIA compliant. Ask us for our DPA.
PDPA
We're PDPA compliant. Ask us for our DPA.
Trusted by 1,000+ GTM teams
Drive GTM value
(With compliant peace of mind)
We understand the challenging role of Security & Legal professionals in an ever-shifting privacy landscape. We commit to ensuring our customers transparently understand how Vector works.
Vector has a proprietary network of publishers who properly disclose, collect, and share their 1st party data; namely, hashed emails (HEMs) and associated Device Fingerprint information.
When a visitor lands on your site, we only look at Device Fingerprints to determine if an identity can be found in our pre-existing compliantly-sourced identity graph. We eagerly geofence our technology to jurisdictions with implied opt-in (but you can further gate Vector behind a Consent Management Platform).
You do not become a contributing member of the data co-op.
FAQs
Common questions related to security, trust, and compliance.
Vector is geofenced to only operate in the United States. While this doesn't "wash your hands" of responsibility in places with tighter regulations, it drastically reduces risk exposure to subjects in those jurisdictions.
Please send request to security@vector.co.
Yes, there are two ways for your users to opt-out.
On your end, you can install Vector within a container or Consent Management Platform (CMP) that disables its functionality.
Additionally, individuals can send requests for deletion to security@vector.co.
Always consult your legal, privacy, and security team, but unless you already have this topic covered, you should consider adding a clause to the affect of:
By accessing or logging into our website, our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We, or our service providers, might then send you communications and marketing materials to these emails or profiles. To opt out of these communications, please email us at security@vector.co.
Yes, despite Vector already geofencing to jurisdications with implied opt-in, you can increase your security posture my creating explicit opt-in by place Vector inside a container or Consent Management Platform (CMP).
Yes, Vector will only fire in the United States. To do so, Vector "technically" fires globally to calculate a visitors IP address. This data collection is incidental and for privacy purposes which means no "establishment" is created for "the effective and real exercise of activities through stable arrangements".
This is entirely possible and would make Vector (and you) responsible for protecting the individuals citizenship rights.
To do so, Vector does not build any of its identity graph with information outside of the US. Said differently, it's impossible to enrich a device fingerprint to an individual from a foreign jurisdiction as we don't collect or purchase any non-US data.