Security by design
CampaignIQ applies layered safeguards across application access, data processing, infrastructure, and operational workflows. Security responsibilities are reviewed as the platform evolves.
Identity and access
Role-based permissions limit access by administrator, business unit, and capability. Passwords are securely hashed, authenticated sessions are protected, and privileged actions are separated from portal-user access.
Application safeguards
- Server-side validation and output escaping reduce injection risk.
- Cross-site request forgery protection is applied to state-changing forms.
- Audit logs record important administrative and campaign activity.
- Rate limits protect sensitive public and API endpoints.
Data protection
Data is transmitted over encrypted connections. Backups, least-privilege access, dependency maintenance, and environment separation support confidentiality, integrity, and availability.
Responsible reporting
If you believe you have found a security issue, contact security@campaigniq.com with enough detail to reproduce the concern. Do not access data that is not yours or disrupt the service while testing.