Legal
Security & Data Handling
Because this site covers cybersecurity as its subject matter, we hold our own data-handling practices to the same standard we expect from the companies we evaluate.
What Data We Collect
- Contact form submissions Name, email address, and message content submitted via our contact page or submit-a-company page.
- Aggregate analytics Non-identifying usage data on which pages are viewed, as described in our Cookie Policy.
Out of scope
We do not collect payment information, government identifiers, or sensitive personal data through any form on this site.
How We Protect It
- All pages on this site are served over HTTPS with TLS encryption in transit.
- Contact and submission form data is retained only as long as needed to respond to and process the inquiry, then deleted or archived in accordance with our internal retention practice.
- Access to any submitted contact information is limited to the individuals directly responsible for reviewing corrections and company submissions.
Third-Party Company Data
The factual claims in each company profile (headcount, services, certifications) are sourced from public information, as described in our Editorial Policy. We do not collect or store non-public data about the companies we profile beyond what is necessary to write and verify each profile.
Reporting a Security Concern
If you believe you've identified a security issue with this site itself (not with any of the companies profiled here), contact us via our contact page with details, and we will investigate promptly. For security concerns related to any specific company listed in our ranking, contact that company directly.
Changes to This Page
This page will be updated if our data-handling practices change materially.