Trust Is Built In
Security, privacy, and governance designed for serious research.
Our Commitment
Built for Long-Term Trust
Market research depends on trust: trust from clients, respondents, and partners. We take that responsibility seriously. Our approach combines formal security programs, privacy-by-design practices, and independent validation across our technology and operations.
Independent Assurance
Verified by Independent Standards
OpinionRoute maintains industry-recognized certifications and audits that demonstrate the maturity of our security and privacy programs.
ISO/IEC 27001 Certified
Our Information Security Management System (ISMS) is certified across the company and covers the Navigator platform, supporting systems, and operational environments.
SOC 2 Type II
Our SOC 2 Type II report is available under NDA, validating controls over security, availability, and confidentiality.
GDPR Certified
Our GDPR certification supports lawful processing, including fraud prevention and secure data storage practices.
Privacy & Data Protection
Privacy by Design, Not by Accident
We follow documented privacy principles and procedures to protect personal data throughout its lifecycle — from collection through processing, storage, and deletion.
Our approach includes:
Support for data subject rights workflows
Privacy-by-design practices where applicable
Alignment with common privacy expectations in market and social research
For all SaaS services — Navigator, CleanID, ResponseID, and QC Flow — we maintain a Data Protection Impact Assessment (DPIA) approach to ensure risks are identified and managed appropriately.
Security Controls
Practical Security, Applied Consistently
Security at OpinionRoute is implemented through layered, documented controls designed to reduce risk and support availability.
Key controls include:
Encryption of data in transit and at rest using industry-standard methods
Access controls based on least privilege, role-based permissions, and strong authentication
Monitoring and incident response with logging, alerting, and documented procedures
Business continuity practices including backup and recovery
Secure development and change management processes to reduce operational risk
Vendor & Subprocessor Oversight
Accountability Beyond Our Walls
We assess vendors and subprocessors that may support customer data through a risk-based evaluation process. This ensures that third-party services meet our expectations for security and privacy.
A current list of subprocessors is available under NDA to qualified customers and partners.
Transparency & Access
Documentation When You Need It
We provide supporting reports and documentation to customers and partners as appropriate.
ISO/IEC 27001 certification
SOC 2 Type II report
GDPR-related materials
Subprocessor lists
Reports and evidence are provided under NDA to qualified parties.
Contact
Questions or Requests
For privacy and GDPR-related inquiries:
privacy@opinionroute.com
For certification, assurance, or subprocessor requests:
support@opinionroute.com
Closing Statement
Trust You Can Rely On
OpinionRoute’s technology and services are built to meet the expectations of organizations that take data quality, privacy, and security seriously — because in research, trust is non-negotiable.
Independently Verified. Not Self-Asserted.
OpinionRoute believes in “Trust but verify”. To walk that walk, we maintain recognized certifications and audits that validate how we protect data, manage risk, and operate our technology — across people, process, and technology.
ISO/IEC 27001
What it is:
The global standard for Information Security Management Systems (ISMS).
What it means for you:
- Security controls are documented, audited, and continuously improved
- Applies across the company, not just one product
- Covers the Navigator, supporting systems, and operational environments
SOC 2 Type II
What it is:
An independent audit validating controls over time (not just a point-in-time snapshot).
What it means for you:
- Demonstrates consistent operation of security and availability controls
- Supports enterprise procurement and risk reviews
- Report available under NDA for qualified customers
GDPR Certification
What it is:
Validation of privacy practices aligned with EU data protection requirements.
What it means for you:
- Lawful processing for fraud prevention and secure data storage
- Support for data subject rights workflows
- Privacy-by-design practices aligned with MRX expectations
DPIA-Driven SaaS Services(Navigator, CleanID, ResponseID, QC Flow)
What it is:
A Data Protection Impact Assessment (DPIA) approach applied to all SaaS processing activities.
What it means for you:
- Privacy risks are identified and mitigated proactively
- Processing is documented and intentional
- Aligns with expectations in market and social research environments
Bridge Statement
Compliance Is the Floor. Discipline Is the Standard.
Certifications matter, but they’re only useful if the underlying practices are real. OpinionRoute pairs independent assurance with day-to-day security controls, privacy governance, and operational accountability. Trust by Verify, in action.
Recognized Security & Compliance Standards
We adhere to globally trusted frameworks to safeguard data, privacy, and system integrity.
Ready to Work Better?
Let’s talk about how an OpinionRoute partnership can simplify your research operations.