Stickrate - Security Trust Center

Security at StickRate

StickRate is Buyer Commitment Intelligence: we measure buyer-side organizational action so revenue leaders know whether each deal is tracking. That means our customers connect us to systems that carry commercially sensitive information - and we designed the platform from day one for that responsibility.

Built for isolation. Every customer's data is tenant-scoped at the database layer, enforced in the infrastructure itself - not just application code. No customer can ever see another customer's data.

AI with guardrails. We use AI for retrieval and signal extraction only - scoring is deterministic and runs server-side. Customer Data sent to LLM providers is processed under agreements that prohibit training on it, and every AI-assisted output is reviewable and correctable by a human.

Enterprise-grade foundations. Hosted on AWS with encryption in transit and at rest, least-privilege access management, and continuous compliance monitoring. Our SOC 2 Type II audit is in progress with an independent auditor engaged.

Transparent by default. This portal is the live view of our security posture, certifications, and sub-processors. Contractual commitments - DPA, Privacy Policy, Acceptable Use Policy - live on our Trust & Compliance legal page.

Security inquiries Privacy inquiries security@stickrate.io privacy@stickrate.io Security reviews, vulnerability reports, incident reports GDPR/CCPA requests, DPA execution, sub-processor notifications

16

Policies

Internal policies that govern how we operate and protect customer data.

Personnel Security Policy 388a10926688816eb55cdc1784e21776

Personnel Acceptable Use Policy 35ba1092668881b681c3ce6df2e86fde

Information Security Policy 35ba10926688818286fed5a9befd91f0

Access Control Policy 35ba10926688811a882dd050646d395c

Incident Response Policy 33da109266888004863ee4e7512ba086

Data Classification Policy 35ba1092668881ce8670da8d7c57c492

Operational Incident Policy 35aa10926688817782e7db90fc0197fb

AI Management & Governance Policy 388a1092668881f08e6cf41edd932ad9

36

Controls

Safeguards continuously monitored across our infrastructure and processes.

Acceptable Use

Access Rights

Asset Inventory

Change management

Configuration & Patch Management

Credential Management

Data Privacy

Data Retention & Destruction

4

Subprocessors

Third parties that process data on our behalf under strict contractual safeguards.

Amazon Web Services

Cloud computing platform providing servers, storage, networking, and databases for application hosting.

Anthropic

Artificial intelligence research company and creator of the Claude large language model and developer tools.

Okta

Identity management platform providing authentication and authorization services for applications.

Sentry

Application performance monitoring and error tracking software.

Resources

Policies, whitepapers, and contacts for deeper information.

Sub-processor List

Acceptable Use Policy

Data Processing Addendum

Privacy Policy

Stickrate Trust Center

1

16

4

0

Security at StickRate

Policies

Controls

Subprocessors

Resources