What certifications is Consentmo working toward?

Consentmo is actively pursuing ISO 27001 and SOC 2 Type 2 certifications. Letters of engagement have been signed with accredited auditors for both. These certifications will formally validate our information security management practices against internationally recognized standards.

How does Consentmo protect my store's data?

We use TLS 1.2+ for all data in transit and AES-256 encryption for data at rest. Access to systems is governed by role-based controls and MFA. Our infrastructure includes automated backups, redundancy, and 24/7 monitoring.

How can I report a security vulnerability?

If you discover a potential security vulnerability, please contact our security team directly at security@consentmo.com. We take all reports seriously and will respond promptly. Please do not disclose issues publicly until we've had the opportunity to investigate and address them.

Does Consentmo comply with GDPR?

Yes. Consentmo is built specifically to help merchants achieve and maintain GDPR compliance. We also adhere to GDPR in how we operate internally - collecting only necessary data, maintaining processing records, and supporting data subject requests.

Where is Consentmo's data hosted?

Consentmo's infrastructure is hosted on enterprise-grade cloud providers with data centers in the EU. This ensures compliance with GDPR data residency requirements and provides high availability and disaster recovery capabilities.

Who is responsible for security at Consentmo?

Security is a shared responsibility across all teams at Consentmo. Our engineering and operations teams maintain security controls day-to-day, while leadership is accountable for our information security policies and certification programs.

Privacy

Your Privacy Choices

We protect merchant and customer data with enterprise-grade security, strict access controls, and industry-leading certifications.