Security at Respondent.
Trust
Respondent is committed to protecting our participants, researchers, and partners from security threats.
Certifications
Security guides everything we do
| Certification | Status | What it covers |
|---|---|---|
SOC 2 CertifiedA copy of the attestation is available on request. | Certified | Respondent is SOC 2 Type II compliant via an external independent auditor, the industry-leading standard for how a service provider manages data to protect every party. |
GDPR and CCPA Compliant | Compliant | Strict processes ensure personal information entrusted by participants and researchers is never shared without consent, in line with Europe's General Data Protection Regulation and California's CCPA regulations. |
Access Control and Single Sign On (SSO) | Supported | Researcher accounts can be associated with organizations and teams, with different access levels for administrative or billing functions, and account access through single sign-on SAML. |
Also included
The rest of the security program.
-
Document Signing and NDA Facilitation
.Researchers can automate requests to sign non-disclosure agreements or other documents before sharing potentially sensitive intellectual property with participants, saving time in research operations.
-
Data Collection and Deletion Practices
.Our company, products, tools and vendors treat researcher and participant data with best-in-class security, backed by a detailed information security and privacy program that minimizes the risk of unauthorized access.
-
Account Deactivation Requests
.Control stays in your hands: deactivation is simple, and you can request deletion of your account and all associated data by contacting us.
FAQ
Frequently asked questions.
Is Respondent audited and certified for data security?
Yes, Respondent is SOC 2 Type II certified and undergoes regular audits through an external independent vendor. This certification is an industry-leading standard that ensures that our data security processes adhere to prescribed best practices.
As a researcher, how do I know that my company's intellectual property and research data is secure on Respondent?
Security is central to everything we do at Respondent. Researchers can require participants to sign a non-disclosure agreement before participating in a study to prevent sensitive IP from being shared. In addition, our advanced access control levels ensure that you can restrict access to research data for exactly the groups that need to know, even within your own organization. These are further backed by our best-in-class data security practices that ensure that your project data is stored securely.
As a participant, what does Respondent do to protect my personally identifiable information?
Respondent collects participant profile information including personally identifiable information to match participants with the most relevant paid research opportunities. We ensure that all such data is stored securely in adherence to robust data security practices and use it exclusively for matching. Respondent actively ensures that even researchers will only have access to participants' profile information during the study itself. Respondent also manages payments directly, to minimize the risk of compromising potentially sensitive payment details and accounts.
How do I learn more about Respondent's security and privacy practices?
You can review our privacy policy for further details or email us at security@respondent.io for questions.
Is Respondent compliant with GDPR and CCPA?
Yes, Respondent is GDPR and CCPA compliant.
What researchers say
How research teams at Microsoft, Paylocity, IBM and Huge recruit with Respondent, in their own words.
