UserTesting Security
We take data safety and security seriously. We protect customer and test participant data using industry-leading controls and systems that prevent unauthorized access, damage, and unintentional deletion.
All confidential and proprietary data (including video files, customer and test participant data) is hosted through Amazon Web Services (AWS), a SOC 2 and ISO 27017 certified hosting provider.
All data is encrypted at rest and in transit. Data is stored in encrypted form using 256-bit AES encryption. Encryption keys are managed by AWS Key Management Services.
All communication to and from the data center is encrypted using TLS 1.2 or greater.
Compliance certifications and membership
Audit
Compliant with auditing criteria as developed by the American Institute of CPAs, ensuring customer data is securely managed
Data protection
Compliant with data protection requirements from the European Economic Area (EEA)
Cloud Security Alliance
Active membership in organization sharing best practices, tools, training, and thought leadership on cloud security
The UserTesting security team is here to help
Our security team is led by the Chief Information Security Officer (CISO) and includes staff responsible for ensuring ongoing information security, including:
Physical security, inclusive of annual physical security audits
Active membership in organization sharing best practices, tools, training, and thought leadership on cloud security
Administration of security training, ensuring all employees are trained on how to best protect confidential information
Immediate attention to inquiries, potential breaches, or other alerts indicating anomalies or issues
