Security and privacy, built in from day one.
How we protect your data, what we collect, and where we're headed on compliance. We describe our practices and goals honestly; we don't claim certifications we don't hold.
Encryption
All traffic is served over HTTPS/TLS. Customer data is designed to be stored with encryption at rest using our cloud provider's managed encryption.
Payments
Payments are designed to run through Stripe, a PCI DSS–compliant processor. MarketScope never stores full card numbers.
Access control
Our standard: least-privilege access for our team, multi-factor authentication on internal systems, and audit logging of administrative actions.
Infrastructure
Built to run on established cloud infrastructure with isolated environments, automated backups and dependency monitoring.
Data minimization
We collect what we need to run the service: account details, billing records and the research you run. We don't sell personal data.
AI & your data
Your research is used to generate your reports. We don't use your private research to train public models.
Where we're headed
These are goals, not certifications we currently hold. We'll update this page as each milestone is reached.
| MILESTONE | STATUS |
|---|---|
| GDPR-aligned privacy practices & DPA | IN PROGRESS |
| Israeli Privacy Protection Law alignment | IN PROGRESS |
| Data export & deletion self-service | PLANNED |
| Third-party penetration test | PLANNED |
| SOC 2 Type I readiness | GOAL |
Your rights
You can request access to, correction of, or deletion of your personal data at any time. See our Privacy Policy for details.
Responsible disclosure
If you believe you've found a security vulnerability, please report it through our contact form (topic: "Security or privacy"). Please give us reasonable time to fix it before public disclosure. We won't take action against good-faith research.