Security you can reason about.
ComplyMo touches your visitors’ consent choices, so we treat that data carefully: encrypted, isolated per tenant, and never sold. Here is exactly how it works.
Encrypted, isolated, least-privilege.
Data is encrypted in transit and at rest. Internal access follows the principle of least privilege: people and services get only the access their job requires. And every customer’s data is isolated per tenant, so one account can never reach another’s. We follow industry-standard security practices rather than reinventing them.
It sits lightly on your page.
The script loads asynchronously, so it never blocks your content from rendering. It is built to live inside a strict Content-Security-Policy. Consent logs are pseudonymous, enough to prove a choice was recorded without profiling anyone, and we never sell personal data or hand it to ad networks.
The controls behind the promise.
TLS 1.2 or higher for data in transit, and provider-managed encryption for data at rest. Traffic between your site, the widget and our services is encrypted in transit.
Production access is limited to named people and only for the work they do. Production secrets live in encrypted provider settings, never in source code.
Each customer’s data is logically isolated. One tenant can never read another tenant’s consent records or settings.
The script loads asynchronously and is designed to sit comfortably inside a strict Content-Security-Policy. It never blocks your page.
Consent records are stored pseudonymously: enough to prove a choice was made, without building a profile of the visitor.
We do not sell personal data and we do not share it with ad networks. Your visitors’ data works for compliance, nothing else.
The widget is served from a global edge and fails open: if it cannot reach us, your page still loads normally. It is designed to degrade gracefully rather than fail hard.
Found something? We want to hear about it. Email security@complymo.com and we will acknowledge your report, investigate, and keep you updated as we fix it.
Compliance, handled.
Passes WCAG 2.2 AA. No contract, no contact-sales wall.
