Security

Our security posture, in detail.

Exclusive EU hosting, no PII stored, hashed visitor IDs, <5KB SDK, strict browser sandboxing. Cookieless intra-session measurement relies exclusively on sessionStorage (strictly-necessary functional storage per CNIL/EDPB) — no cookies, no localStorage, no browser fingerprinting, no consent required. SOC 2 Type II in progress. Full security memo (architecture, subprocessors, encryption, access controls) available on commercial request.

Direct contact: hello@consentlift.com