Security & trust

A straightforward approach to your data

TrackBase monitors only publicly available data, encrypts it in transit, and secures access with revocable API keys and least-privilege internal access — so you always know how your data is handled.

Public data only Encrypted in transit Revocable API keys
  • What we collect

    • Publicly available pages only
    • No account access or private data
    • You control what's monitored
    • Only the pages you point us at
  • Access control

    • Team users, roles & permissions
    • Admin & super-admin tiers
    • API keys you can revoke anytime
    • Least-privilege access internally
  • Data protection

    • Encryption in transit (TLS)
    • Access restricted on a need-to-know basis
    • Sign-in secured by JWT
    • Stripe handles card payments
  • Reliability & disclosure

    • Monitoring-health alerts on failures
    • Status page for incidents
    • Responsible disclosure process
    • Prompt acknowledgement of reports

Security FAQ

Common security questions

Does TrackBase have security certifications like SOC 2?

TrackBase is approaching launch, and formal certifications such as SOC 2 are on our roadmap — they are not in place yet. In the meantime we follow security best practices: public-data-only monitoring, encryption in transit, revocable API keys, and least-privilege internal access.

How is my data protected?

Data is encrypted in transit, sign-in is secured by JWT, and applications authenticate with API keys that you can revoke at any time. Internal access to data is restricted on a least-privilege basis, and card payments are handled by Stripe.

Do you support roles and permissions?

Yes. You can invite users to your organization and assign roles and permissions, including an administrator role and a higher super-administrator tier. Single sign-on (SSO/SAML) is not available yet.

Does TrackBase access private account data on the sites it monitors?

No. TrackBase only collects publicly available pricing and product information. There is no account access or private data involved in monitoring.

Where can I report a security issue?

Email security@trackbaseai.com with details. We operate a responsible disclosure process and aim to acknowledge reports within one business day.

Still have questions? Talk to us →

Ready to evaluate TrackBase?

Talk to our team about security reviews, DPAs, and enterprise onboarding.

  • Free plan — no credit card
  • 14-day trial on paid plans
  • Cancel anytime