Your Security is Our Priority
Learn how we protect your marketing data, your customer records, and your privacy — with encryption, RBAC, and GDPR/CCPA controls, built on the Burdenoff platform.
Security Features
Advanced security measures that protect every aspect of your experience
Encryption in Transit & at Rest
Data is encrypted with industry-standard TLS in transit and encrypted at rest, with secrets held in a per-environment secrets vault.
Authentication at the Edge
Authentication is enforced at the platform edge, with token validation handled centrally — services never trust unauthenticated callers.
Multi-Tenant Isolation
Each organisation’s contacts, campaigns, and assets are isolated, with backups and recovery built into the platform.
RBAC & Audit
Every action is scoped by role and protected by RBAC directives, and every campaign, message, and change is attributable.
Privacy Protection
Your privacy matters to us. Here's how we protect your personal information.
Data Minimization
We only collect the data needed to provide the service — your contacts, campaign data, and account details.
Consent & Compliance
GDPR/CCPA controls and consent management are built into the CRM, so you can honour subscriber preferences and data-subject rights.
User Control
You have control over your data with options to view, edit, export, or delete your information and your marketing data.
No Data Selling
We never sell your personal data or your customers’ data, and we do not use it for purposes other than those stated.
Standards We Build Toward
The frameworks and practices that guide how we design security and data protection. HeadshotMarketing is pre-launch — these reflect the standards we are building toward, not certifications we currently hold.
GDPR-Aligned
Built to align with GDPR principles for data protection and user rights
RBAC by Design
Role-based access control and audit on every action across the platform
Reputable Cloud
Hosted on enterprise-grade cloud infrastructure with isolation and backups
Secrets Vault
Per-environment secrets vaults hold credentials — never in code or config
Stay Safe Online
Follow these best practices to keep your account and transactions secure
Keep Your Account Secure
Use a unique, strong password and keep your recovery email up to date for the best account protection.
Use Strong Passwords
Create unique, complex passwords and avoid reusing credentials across services.
Respect Subscriber Consent
Only import contacts you have permission to market to, and honour consent and opt-out preferences across every channel.
Report Suspicious Activity
Immediately report any unusual account activity or suspicious behavior to our support team.
Security Incident Response
If you notice any suspicious activity on your account or encounter a security issue, we're here to help immediately.
Immediate Actions:
- • Change your password immediately
- • Enable two-factor authentication
- • Review your recent transactions
- • Contact our security team
We Will:
- • Acknowledge and investigate promptly
- • Secure your account
- • Provide regular updates
- • Assist with recovery
Responsible Disclosure
Help us keep HeadshotMarketing secure. If you discover a vulnerability, report it to us privately and we'll work with you to fix it. A formal bug-bounty program is planned around launch.
- • Email us before disclosing publicly, and give us reasonable time to fix.
- • Do not access, modify, or exfiltrate data that isn't yours.
- • We acknowledge valid reports and keep you updated on remediation.
Secure by Design
Experience the peace of mind that comes with enterprise-grade security. Your trust is our commitment.