How we keep your data safe
Security is part of every request Plainscrape handles. Here is what every account gets, on every plan.
Built in
The protections every account gets from day one.
Encrypted
Your data is encrypted in transit and at rest.
Keys only you hold
API keys are shown to you once and stored in a form only you can use.
Public web only
Plainscrape reads public web pages, and checks every address before it fetches.
Monitored around the clock
Continuous threat detection and alerting keep watch at all times.
Backed up and tested
Regular encrypted backups, proven by restoring them.
Kept current
Our software is updated regularly and checked for known vulnerabilities.
Short-lived results
Results are deleted automatically after 7 days.
Your data, your call
Export or delete your data any time: email hello@plainscrape.com from your account address. See privacy.
Trusted infrastructure
Hosted on AWS. Card details stay with our payment provider.
For business customers
Everything your procurement and security teams need.
Compliance
Plainscrape runs on AWS, whose infrastructure is independently audited for SOC 1, SOC 2, SOC 3 and ISO 27001.
Documentation
Business customers on a paid plan can request our security documentation and subprocessor list under a confidentiality agreement.
Questionnaires
We are glad to complete your security questionnaire. Write to security@plainscrape.com from your account address.
Report an issue
We welcome reports from security researchers and respond quickly.
How to report
- Email us the steps to reproduce what you found.
- Test with your own account and data, keeping the service smooth for everyone else.
- Give us time to fix the issue before you share it.
Covers this website, the public API and the dashboard.
Our commitment
We read every report, keep you updated as we fix it, and treat good-faith research that follows this page as help.