SECURITY & TRUST

Control, clear boundaries, and a responsible way to report issues.

Surpasso connects research, customer content, analytics, and publishing destinations. Our security approach starts by limiting access, keeping important actions reviewable, and giving customers practical control over their connections and data.

Report a security concern Read our Privacy Policy

DATA & ACCESS

Use only the access needed to provide the feature.

Account boundaries

Access to customer work is tied to authenticated accounts, workspace membership, and the permission checks required by each operation.

Connected services

Publishing and analytics connections use the authorization supplied for that service. Customers can disconnect integrations they no longer want Surpasso to use.

Credential handling

Passwords, API keys, and access tokens should never be sent by email. Sensitive connection details receive additional protection and are used only to operate the authorized integration.

Data use

Customer materials are processed to operate, secure, support, and improve the service. Surpasso does not use customer materials to train a Surpasso general-purpose AI model.

SAFE AUTOMATION

Automation should not erase accountability.

Reviewable work

Plans, drafts, publishing states, and outcomes are designed to remain visible so teams can understand what the system is doing.

Explicit publishing choices

Customers decide how work is reviewed and when an approved workflow may publish to a connected destination.

Bounded external access

Website retrieval and provider operations are constrained to the information and actions needed for the requested workflow.

Operational traceability

Important background actions retain status and error information so failures can be investigated instead of disappearing inside an automation.

CUSTOMER CONTROL

Your practical controls matter as much as our internal safeguards.

Pause or change automation

Keep work manual, require review, or use approved automation according to the controls available for the workflow.

Disconnect destinations

Remove an integration when it is no longer needed and rotate credentials with the connected provider if exposure is suspected.

Request access or deletion

Use the product controls available to you or contact us for a privacy request. We may verify identity and authority before acting.

ASSURANCE STATUS

We will not imply a certification we have not published.

This page describes current product and operating principles. It is not a SOC 2 report, ISO certification, penetration-test attestation, uptime SLA, or complete subprocessor register.

Need a security review?

Start a security review

Legal and privacy detail

The Privacy Policy and Terms of Service provide the fuller public description of data categories, service providers, retention, user rights, and acceptable use.

Read the Privacy Policy

REPORT AN ISSUE

Help us investigate without creating more risk.

Include the affected URL or feature, potential impact, and safe reproduction steps. Do not perform denial-of-service testing, social engineering, spam, or access another customer’s information.

Send a responsible disclosure Read the Terms