Need help applying this to your account?
Contact support and we will keep this article attached to your request.
Overview
Referral Factory has security features that help protect your account, your referral program, and the customer data you collect. What you can use depends on your plan and how your campaign is set up.
Security standards
Referral Factory is SOC 2 Type II audited, ISO 27001 certified, and GDPR compliant. If your security or procurement team needs the current report or certificate, request it from Referral Factory.
Protecting customer data
Referral Factory's Data Processing Addendum explains the security measures we use to protect customer data, including encryption, security testing, recovery processes, and controls around our subprocessors.
Account access
Depending on your plan, Referral Factory may provide two-factor authentication, teammate access, email verification, and SAML single sign-on. Use a separate account for each team member instead of shared logins. Review access when someone's role changes.
Campaign controls
Campaign Settings include:
reCAPTCHA under Advanced Settings → reCAPTCHA Configuration;
email verification for referrers and leads;
Referral Limit;
Terms & Conditions for the referral journey; and
tracking and analytics controls.
The Leads view can show Status, Source, Referred By, Qualified Date, IP, and Integration ID. Use these details when you need to investigate unusual activity.
Hosting and enterprise options
Enterprise customers can discuss data hosting in Europe or the USA. Some deployments also support a self-hosted data layer on-premise or in an approved cloud environment. Ask Referral Factory which options apply to your plan and who is responsible for each part.
For more detail, see the enterprise security and data options page.
For evidence used in a procurement review, see the guides to request the SOC 2 Type II report and request ISO 27001 certificate details.