When you connect your store, you trust us with customer names, emails and phone numbers. Here's how we protect them today, and how we keep reviews honest.
HTTPS everywhere; files and keys encrypted
Invitation contact details after 3 years by default
We never ask for or store them
Roles, 2FA and an activity log
Pages and the API are served over HTTPS. Uploaded documents, proof files and imports are encrypted file by file (AES-256-GCM), and the keys you give us for integrations are stored encrypted. Customer contact details from invitations are deleted after 3 years by default, or sooner if you choose.
Passwords need at least 12 characters and are checked against known data breaches (only a short, anonymous part of a hash leaves our server). Two-step verification with an authenticator app, which a business can require for its whole team, plus roles per profile and an activity log.
Proofwell never asks for or stores card numbers. When a plan is paid by card, the card is entered only on the payment provider's own secure pages.
An append-only audit log that can't be edited or deleted, a tamper-evident log of review decisions, and nightly database backups. An off-site copy of the backups is being set up.
These tools help you meet your obligations. They aren't legal advice or a certification.
Customer data requests (a copy or deletion), records of consent, and contact details deleted on schedule.
Customer data requests (a copy or deletion), records of consent, and contact details deleted on schedule.
Customer data requests (a copy or deletion), records of consent, and contact details deleted on schedule.
Our privacy policy, business terms and how anyone can ask for their data.
We don't hold security certifications such as SOC 2 or ISO 27001 yet. We'll only list certifications here once we actually hold them.
Your reviews are only valuable if shoppers believe them.
Badges show how each review was checked, from order matching to identity checks.
Reported reviews go to our moderation team, and reviewers can be asked for proof of their experience.
No plan changes scores, rankings or moderation. No plan can remove reviews.
Live system status and incident history.
Open status page →Found a vulnerability? Tell us through the contact form and we'll reply by email.
Contact us →Send us your security questions and we'll answer what we can.
Get in touch →On Proofwell's own database and file servers. We'll name the hosting region on this page before launch, and tell business customers before it changes.
Only your team members with access to that profile, and Proofwell staff when needed to support you. Customer contact details are never shown publicly.
Yes. Download your reviews, invitations and more from your account, and anyone can ask for a copy or deletion of their personal data.
Not yet. We don't claim certifications we don't hold.
Free to start. The Free plan needs no card.