Trust & Safety

Advertising built on ground you can inspect

A campaign is only as good as the data and the inventory underneath it. The same controls run across privacy, brand safety, traffic quality, and platform security, so buyers and sellers can see what they are working with.

Principles

The commitments behind the platform

Six areas shape how campaign data is collected, delivered, and reported.

Privacy & Consent

Consent signals travel with the data from collection through to activation, so the choices people make follow their information into campaigns.

Data Protection

First-party data is handled with hashing, access controls, and defined retention. Personal data is never sold.

Brand Safety

Content categories, blocklists and allowlists, and placement-level controls let buyers decide where creative appears.

Fraud & Invalid Traffic

Filtering before and after the bid, aligned to recognised invalid-traffic guidance, plus traffic-quality scoring across supply.

Vendor Management

Partners are reviewed before and during an engagement, with written expectations for data handling and delivery quality.

Platform Security

Technical and organisational measures designed to protect workspace data, which may include encryption in transit, access controls, and administrative logging.

Standards

Built to recognised control requirements

CenebofSolution builds its practices against widely used security and privacy control requirements, and reviews them as the platform and the surrounding guidance change.

  • Security controls built to SOC 2 and ISO 27001 control requirements
  • Data processing aligned to GDPR and CCPA expectations
  • Consent handling aligned to the major consent frameworks
  • Traffic filtering aligned to recognised invalid-traffic guidance

Control map

Reviewed
Security controlsSOC 2 & ISO 27001 control requirements
Mapped
Data processingGDPR & CCPA aligned
Mapped
Consent handlingMajor consent frameworks
Mapped
Traffic filteringRecognised invalid-traffic guidance
Mapped
Practices

How controls are kept current and reviewed

Security and privacy work is continuous. These are the practices we apply to keep controls effective.

Access review Access is limited by role, with least privilege as the default.
Documented
Security testing Where security testing is carried out, findings are tracked through to resolution.
Documented
Vulnerability management Dependencies and services are monitored for known issues and patched on defined timelines.
Documented
Change management Releases go through review and a staged rollout before they reach production workspaces.
Documented
Incident response Documented procedures cover detection, containment, notification, and follow-up review.
Documented
Vendor review Partners are reviewed before onboarding and reassessed as the relationship continues.
Documented

Need detail for a vendor review?

Our team can walk your reviewers through our practices, data handling, and platform controls.