Your review data is a strategic asset. We treat it that way — with multi-tenant isolation, encryption, and access controls designed for enterprise-grade trust.
Every organisation's data is fully isolated at the database level. All queries are scoped through a single authentication chokepoint that enforces organisation boundaries on every request. There is no mechanism — in the UI, API, or database layer — for one client to access another's data.
When a user logs in, their organisation ID is refreshed from the database on every page load, and every database query is automatically filtered to their organisation's scope. This isolation is enforced regardless of user role or access level.
User authentication is handled through secure session management with CSRF protection on every form submission. Passwords are hashed using bcrypt with a work factor that makes brute-force attacks computationally impractical.
Two-factor authentication (2FA) is available for all accounts and can be enforced at the organisation level. Login attempts are rate-limited per email address and IP address, with automatic lockouts after repeated failures. Sessions expire after a period of inactivity and are invalidated server-side on logout.
Role-based access control (RBAC) allows administrators to assign users to specific locations. Managers see only the locations assigned to them. Staff access is scoped further. Data isolation is enforced at the query level, not just the UI level.
All data in transit is encrypted using TLS 1.2 or higher. Every connection to the platform — browser sessions, API calls, webhook deliveries — is encrypted end to end.
Sensitive credentials and API keys stored in the database are encrypted at rest using AES-256 encryption with securely managed encryption keys. Passwords are never stored in plaintext or reversible encryption — only one-way bcrypt hashes.
Integrated Reviews connects to a limited number of carefully selected third-party services, each with a specific and scoped purpose:
Used to sync reviews from your connected Google Business Profiles. OAuth 2.0 authentication with scoped, revocable access tokens. We request only the minimum permissions required to read review data.
Review text is sent to Anthropic's Claude API for sentiment analysis and data extraction. Anthropic does not use API inputs for model training. No personally identifiable information beyond reviewer display names (already public on Google) is transmitted.
All payment processing is handled by Stripe. We never see, store, or process credit card numbers. Stripe is PCI DSS Level 1 certified — the highest level of payment security certification.
Transactional emails (alerts, notifications, password resets) are sent through server-side mail infrastructure. Email addresses are stored in our database and are never shared with third-party marketing platforms.
The platform is hosted on managed infrastructure with automated backups, firewall protection, and DDoS mitigation. Server software is kept up to date with security patches applied promptly.
Database access is restricted to application-level connections only — there is no direct external access to the database server. All database connections use authenticated credentials with the minimum required privileges.
The application is built with security as a foundational concern, not a bolt-on. Key measures include CSRF token validation on all state-changing requests, parameterised database queries (PDO prepared statements) to prevent SQL injection, input validation and output encoding to prevent XSS attacks, rate limiting on authentication endpoints, honeypot fields on public forms to prevent automated abuse, and secure session configuration with HttpOnly and Secure cookie flags.
When an organisation's account is cancelled, a 30-day grace period allows for reactivation. After the grace period, the organisation's data is soft-deleted (marked as purged) and excluded from all queries and processing. Purged data is retained for a limited period to support recovery requests, after which it is permanently deleted.
Organisations can request immediate data deletion by contacting our support team. We will process deletion requests within 30 days.
If you discover a security vulnerability in Integrated Reviews, we want to hear about it. Please report security issues responsibly by emailing security@integratedreviews.com. We will acknowledge receipt within 24 hours and provide an initial assessment within 72 hours.
We ask that you give us reasonable time to address the issue before any public disclosure, and that you do not access or modify other users' data during your research.
Have security questions or need documentation for your compliance team? We're happy to provide additional detail.
Contact our team