FOUNDING PARTNERS 10 of 10 spots open. Growth for $129 per location for 12 months, then $249. Apply →
SECURITY

How we protect your customers.

Your customers trust you with their phone numbers and their words. Here’s exactly how we handle both, including what we don’t have yet.

Where data lives.

The basics, in plain words.

HOSTING In the United States TripleReviews runs on Vercel, with a managed Postgres database from Neon. Your data is stored in US data centers.
ENCRYPTION Sent and stored safely Everything sent to and from us is encrypted. The database and its backups are encrypted too, by our providers.
SEPARATION Your data stays yours Each business’s data is separated at the database level, so one account can never read another’s.
BACKUPS Continuous, with restore The database is backed up continuously and can be restored to a point in time if something goes wrong.
PAYMENTS We never see your card We set up billing with you by email, through our payment provider. Card numbers are never entered on TripleReviews or stored on our servers.
AI Only what’s needed We send the AI only the text it needs for a task. By default, Anthropic and OpenAI don’t use data that businesses send them to train their AI.

Who can see it.

One owner login per account today, and every time our team opens an account is logged.

SIGN-IN Strong by default Sign-in is handled by Clerk, with two-step verification available for every user.
ROLES One owner login Today each account has one login, the owner’s. Team logins with roles are coming soon.
AGENCIES Coming soon Agency access is coming soon. Partners will reach only the clients who invite them, and every visit will be logged.
OUR TEAM On request only Our team opens your account only to help when you ask, and that access is logged too.

Texts and consent. COMING SOON

Texts are coming soon. Today requests go out by email. These are the rules we will follow for every text sent in your name.

CONSENT Recorded for every customer When texts launch, we will text only customers who agreed in writing to get texts from you, before the first text. You confirm it in TripleReviews, and we record who confirmed it and when.
OPT-OUT One word to stop When texts launch, customers can reply STOP to any text, or ask in their own words, and never hear from us again for your business.
NUMBERS Registered with phone companies When texts launch, they will go out through Twilio from numbers registered for your business with US phone companies.

Who we work with.

The services that process data on our behalf.

VercelHosting
NeonDatabase
ClerkSign-in
TwilioVerification codes · review texts coming soon
ResendEmail
AnthropicAI (Claude)
OpenAIAI (ChatGPT)
GoogleSign in with Google · Business Profile connection (coming soon)
Google Maps PlatformPlaces API · server-side key · nothing cached
SentryError reports
PostHogSite analytics
CloudflareSpam check on forms

Straight answers.

Including what we don’t have yet.

Are you SOC 2 certified?

Not yet. SOC 2 is an outside security audit. We’ll start one when our multi-location customers need it, and we’ll say so here when it’s done.

Are you HIPAA compliant?

No. HIPAA is the US health privacy law. That’s why we don’t work with dental, medical, physical therapy or chiropractic practices yet. Our Healthcare edition is on the way.

Can I export or delete my data?

Yes. Ask us for a copy of your customers, notes and follow-ups anytime, and download your videos yourself. When you close your account, we delete your data within 60 days, except what the law requires us to keep.

Do you sell data or show ads?

No. We don’t sell personal information, and we don’t use your customers’ details for advertising.

What happens if there’s a breach?

We tell affected customers without delay, explain what happened and what we’re doing about it.

Found a
security issue?

Write to us. We read every report and reply within one business day.

Report an issueContact us