Security
Security is a first-class part of the product.
This page is maintained by ReturnRack to answer common security and privacy questions. It is not an independent certification.
ISO 27001 certified
Independently audited information security management system.
GDPR compliant
UK & EU GDPR aligned. DPA available on request.
Encryption
TLS 1.3 in transit and AES-256 at rest across all customer data stores.
SOC 2 in progress
Type II audit currently underway with a UK-based CPA firm.
Report a vulnerability
Please email security@returnrack.co.uk. We respond within one working day and coordinate disclosure with reporters.