Security & Trust
Your data is safe with ProofBeer.
We take security seriously — not as a checkbox, but as a core part of building a platform people can trust. Here is how we protect your data and your customers' data.
Security Foundations
Encryption Everywhere
All data transmitted between your browser and ProofBeer is encrypted using TLS 1.2 or higher. Data at rest — including form responses, review content, and user credentials — is encrypted in storage.
Secure Authentication
User passwords are hashed using bcrypt with a high work factor before storage — plain-text passwords are never stored. Session tokens use signed JWTs with short expiry windows to limit exposure.
Cloud Infrastructure
ProofBeer runs on enterprise-grade cloud infrastructure with automated failover, daily backups, and geographically distributed storage. File uploads are stored on Google Cloud Storage with access controls.
Minimal Data Access
Internal access to customer data is limited to authorised personnel on a strict need-to-know basis. No ProofBeer employee accesses customer form responses or review data without explicit customer request or legal requirement.
Continuous Monitoring
Our systems are monitored continuously for anomalous activity, failed authentication attempts, and unusual data access patterns. Security patches are applied promptly when vulnerabilities are identified.
Uptime Commitment
We target 99.9% uptime for all ProofBeer services. Planned maintenance windows are communicated in advance. Historical uptime and incident reports are available to paid plan customers on request.
Compliance
GDPR
ProofBeer processes personal data as a Data Processor on behalf of our business customers (Data Controllers). We maintain a GDPR-compliant Data Processing Agreement and support data subject rights.
CCPA
California residents have the right to know, delete, and opt out of the sale of their personal data. ProofBeer does not sell personal data. Data deletion requests are processed within 30 days.
Cookie Compliance
We use only necessary, analytics, and functional cookies. Our Cookie Policy discloses all cookies and third-party tracking technologies used on the ProofBeer website and platform.
Found a Security Issue?
We welcome responsible disclosure of security vulnerabilities. If you discover a potential security issue in ProofBeer, please report it to us privately before making it public. We commit to acknowledging your report within 48 hours and working with you to resolve the issue promptly.
Report a VulnerabilityPlease do not disclose security issues publicly until we have had a chance to address them.
Frequently Asked Questions
Is ProofBeer GDPR compliant?
Yes, ProofBeer is fully GDPR compliant. We act as a Data Processor and offer a standard Data Processing Agreement (DPA) to outline our commitments to privacy, data transit security, and subject access rights.
How does ProofBeer protect credit card information?
ProofBeer does not store your credit card details directly. All transactions and subscription billing are processed securely through Stripe, a PCI-DSS Level 1 compliant payment processor.
Where is ProofBeer data hosted?
Our core database and assets are hosted in secure Google Cloud regions with redundant storage, hourly backups, and robust firewalls.
Security or compliance questions? support@proofbeer.com · Privacy Policy · Data Processing Agreement
ProofBeer is an all-in-one social proof platform for websites. It combines AI-assisted feedback forms, automatic Google, Facebook and Instagram review sync, and embeddable testimonial widgets in one dashboard. ProofBeer is software and is not related to beer or alcohol.
Privacy and GDPR
ProofBeer acts as a processor for the feedback you collect and you are the controller. Our Data Processing Agreement covers roles, the personal data we process, security measures and sub-processors. If you collect feedback from people in the EU or UK, you should have a lawful basis, tell respondents how their data is used and get permission before publishing their words or photos. This page is not legal advice.
Third parties we rely on
List sub-processors in a table: name, purpose, location. Paddle processes payments as merchant of record.
Questions from security reviewers
If your team needs a security questionnaire, a signed DPA or details about hosting, contact us through the contact page and we will respond within 24 hours on business days.
Frequently asked questions
Does ProofBeer offer a Data Processing Agreement?
Yes. The DPA at proofbeer.com/legal/dpa explains roles, the personal data processed, security measures and sub-processors. Business customers who collect feedback from people in the EU or UK can use it to support GDPR documentation. Contact support if you need a signed copy.
How do I report a security vulnerability?
Email support@proofbeer.com with the subject 'Security', describe the issue and include steps to reproduce it. Please avoid accessing other customers' data and give the team reasonable time to fix the problem before disclosing it publicly. The team aims to acknowledge reports promptly.