How BannerMotion protects your data and your clients’ data.
The security measures the product has today, which companies process data for us, and how to tell us if you find a problem.
What the product does today to protect your data
Each brand, isolated
Each brand lives in its own workspace. The database itself prevents one brand from seeing another brand’s data (row-level security), not just the screen.
Two-step verification
Turn on a second step when you sign in, with a code from your phone, to protect your team’s accounts.
Audit log
Important actions are recorded: who did them, when and on what.
Secure API keys
API keys are stored irreversibly encrypted (hashed), not as readable text. Each one has its own permissions and can be revoked.
Signed webhooks
Each automatic notice (webhook) carries a signature (HMAC) so you can check it comes from BannerMotion. It is never sent to private or internal network addresses.
Roles and permissions
Four roles (owner, admin, editor and reviewer) define what each person can do.
Subprocessors
A subprocessor is a company that processes data on behalf of BannerMotion. [List to be confirmed before publishing.]
| Company | Purpose | Location |
|---|---|---|
| Anthropic | AI content generation | [region] |
| [Payment provider] | [Charges and invoices] | [region] |
| [Hosting provider] | [Application hosting] | [region] |
| [Email provider] | [Sending emails] | [region] |
Certifications: [to be defined. We do not claim certifications we do not have.] See the full list
Found a vulnerability?
Tell us what you saw, how to reproduce it and what impact you think it has. We will reply within [timeframe].
Want to review security with your team?
Write to us and we will answer the questions from your security or procurement team.