60 Atlantic Avenue, Toronto

Sus Datos Siguen Siendo Suyos

Construido con seguridad, privacidad y cumplimiento como principios fundamentales, no como ideas posteriores.

Seguridad y Privacidad de Nivel Empresarial

Security Architecture

Separación Completa de Inquilinos

Sus datos se almacenan en una base de datos dedicada, no en un esquema compartido. Usted es dueño de sus datos y PollZapper no puede acceder ni monetizarlos sin permiso explícito.

  • Separate database per tenant for complete isolation
  • Anonymous polling: no respondent PII stored
  • Interview metadata isolated per tenant
  • Protected references to prevent unauthorized access

Cifrado en Reposo y en Tránsito

Todos los datos están cifrados mediante protocolos estándar de la industria. El control de acceso basado en roles garantiza que solo los usuarios autorizados accedan a datos confidenciales.

  • Industry-standard encryption for all connections
  • Secure session management with protection against common attacks
  • File storage encrypted at rest on enterprise cloud infrastructure
  • Two-factor authentication (2FA) support
  • Role-based access control (RBAC) with granular permissions

Registros de Auditoría Completos

Cada acción se registra con marca de tiempo, usuario y alcance. Cumpla con los requisitos regulatorios con un SLA de auditoría del 99,9%.

  • All user actions logged (create, read, update, delete)
  • Data access tracking (who viewed what, when)
  • Permission changes audited
  • Interview quality flags logged with reasons
  • Exportable audit reports for compliance reviews

Encuestas Anónimas y Opciones de Conocimiento Cero

Los datos de respuesta no incluyen la identidad del encuestado. Para proyectos confidenciales, habilite operaciones de campo de conocimiento cero donde los encuestadores no pueden ver el contexto del cliente.

  • Anonymous response collection (no PII stored)
  • Compartmentalized access for confidential projects
  • Blind field operations: canvassers see questionnaires but not client/sponsor identity
  • GPS validation without linking location to respondent identity

Escalable, Redundante, Monitoreado

Construido en Google Cloud Platform con copias de seguridad automatizadas, monitoreo en tiempo real y SLA de tiempo de actividad del 99,9%.

  • Daily automated backups with multi-week retention
  • Real-time system monitoring and alerting
  • Geographic redundancy with automated failover
  • 99.9% uptime SLA with public status page
Compliance Readiness

Meeting Global Standards

GDPR

Architecture Ready

EU General Data Protection Regulation

  • Right to erasure: Automated deletion workflows with verification
  • Right to data portability: Export in machine-readable formats (CSV, JSON, SPSS)
  • Data protection by design: Complete tenant isolation and anonymous polling
  • Security of processing: End-to-end encryption, RBAC, and 2FA

SOC 2 Type II

In Progress

Service Organization Control 2

  • Security: Encryption, access control, audit logs
  • Availability: 99.9% uptime SLA, automated backups
  • Confidentiality: Tenant isolation, role-based access
  • Processing Integrity: Data validation, quality controls

HIPAA

Architecture Supports

For Healthcare Research

PollZapper's architecture supports HIPAA-compliant polling when configured properly. Business Associate Agreement (BAA) available on Enterprise and Agency plans.

21 CFR Part 11

Audit Trail Support

FDA Electronic Records

Comprehensive audit logging supports FDA requirements for electronic records and signatures. Suitable for clinical trial polling and research.

Data Ownership & Portability

You Own Your Data. Period.

PollZapper does not claim ownership of your polling data, questionnaires, or results. You can export everything at any time.

  • Export raw response data in CSV, Excel, or SPSS (.sav) formats
  • Export questionnaire definitions as JSON for platform migration
  • Export sampling frames and metadata for reproducibility
  • Export reports as PDF or Excel with your custom branding
  • Agency plan: Cryptographic hashes for tamper-proof verification
  • Data retention: Your choice—delete anytime or retain indefinitely
Common Questions

Security FAQ

Where is my data stored?

Primary hosting: Google Cloud Platform (US). Regional data residency options available on Agency plan for EU, UK, Canada, or Australia hosting.

Can PollZapper access my data?

No. PollZapper employees do not have routine access to tenant databases. Access is granted only for explicit support requests with your consent, and all access is logged.

What happens to my data if I cancel?

You can export all data before cancellation. We retain your data for 30 days (recoverable if you resubscribe), then permanently delete it. Request immediate deletion anytime.

Is respondent data anonymous?

Yes. PollZapper does not store respondent PII unless you explicitly collect it via custom questions. Interview metadata (GPS, timestamp) is not linked to respondent identity.

Do you have a HIPAA BAA?

Yes, Business Associate Agreements are available on Enterprise and Agency plans. Contact sales to execute a BAA for healthcare research projects.

How do I report a security vulnerability?

Email [email protected] with details. We follow responsible disclosure and acknowledge reports within 48 hours.

Questions About Security?

Our team is here to help with compliance, security reviews, and custom configurations.

Contact Security Team View All Features

PollZapper.com

Manténgase a la vanguardia en el mundo de las encuestas científicas. Únase al boletín de PollZapper y obtenga información exclusiva, consejos de expertos y acceso de primera mano a las últimas actualizaciones de productos y lanzamientos de funciones.

Ponte en contacto

60 Atlantic Avenue, Toronto, ON. M6K 1X9 Canada

Enlaces rápidos

Regiones

©2024 - PollZapper.com. Reservados todos los derechos.