Skip to the main content.
TRIAL
REQUEST DEMO
TRIAL
REQUEST DEMO

Security Center

We take security seriously and welcome responsible disclosure from the security community.

SOC2_cover

Report a Security Vulnerability

Found a security vulnerability? Report it to security@deskalerts.com. We work with security researchers to verify and address security concerns quickly.

Report Issue

Responsible Disclosure Policy

We welcome good-faith security research. Please:

  • Don't access or modify customer data
  • Don't disrupt services
  • Don't use social engineering or phishing
  • Allow us time to fix before public disclosure

When reporting, include:

  • Affected product/URL
  • Reproduction steps
  • Impact assessment
  • Contact details

We'll respond within 3 business days and provide progress updates.

Safe Harbor

If you follow this policy and act in good faith, we will not pursue legal action or involve law enforcement regarding your research.

We consider responsible security research conducted under these guidelines as authorized activity.

 SOC 2 Type II audit completed

Security and compliance at a glance

The audits, certifications and privacy commitments behind DeskAlerts.

SOC 2 Type II

Audit completed in March 2026. The report is available under NDA.

GDPR

GDPR compliant. We enter into a Data Processing Agreement with customers who require one.

Data Privacy Framework

Active participant in the EU-U.S. DPF, the UK Extension and the Swiss-U.S. DPF.

UK Cyber Essentials

Certified since August 2026.

NIST CSF 2.0

Annual cybersecurity self-assessment.

Penetration testing

Performed every year.

Details for a security review

The SOC 2 Type II audit covers July–December 2025; the 2026 audit cycle is under way. GDPR compliance rests on internal privacy policies and procedures, a Data Processing Agreement with technical and organizational measures and sub-processors, an EU representative (Prighter), participation in the Data Privacy Framework with annual re-certification, and UK data protection registration with the Information Commissioner’s Office. The Data Privacy Framework participant is ToolbarStudio Inc. DBA DeskAlerts. The NIST Cybersecurity Framework 2.0 self-assessment underpins the security program and the SOC 2 audit; its outputs are internal.

For the SOC 2 report under NDA or any compliance question, contact security@deskalerts.com

For general security inquiries: security@deskalerts.com