Privacy & Consent
Consent signals are carried through from collection to activation, so the choices people make follow their data into campaigns.
Trust & Safety
Advertising people can trust
Campaigns run on data and inventory. Quantovesta applies consistent controls across privacy, brand safety, traffic quality, and platform security so advertisers and publishers can work with confidence.
Principles
What we control for
Six areas that shape how campaigns are collected, delivered, and reported.
Data Protection
First-party data is handled with hashing, access controls, and defined retention. Personal data is not sold.
Brand Safety
Content categories, blocklists and allowlists, and placement-level controls let buyers decide where creative appears.
Fraud & Invalid Traffic
Pre-bid and post-bid filtering, aligned to recognised invalid-traffic guidance, plus traffic-quality scoring on supply.
Vendor Management
Third-party partners are reviewed before and during engagement, with documented expectations for data handling and delivery quality.
Platform Security
Encryption in transit and at rest, role-based access control, and audit logging across workspace activity.
Standards
Aligned to recognised control requirements
Quantovesta builds its practices to widely used security and privacy control requirements, and reviews them as our platform and the surrounding guidance evolve.
- Security controls built to SOC 2 and ISO 27001 control requirements
- Data processing aligned to GDPR and CCPA expectations
- Consent handling aligned to the major consent frameworks
- Traffic filtering aligned to recognised invalid-traffic guidance
Practices
How controls are kept current and reviewed
Security and privacy work is continuous. These are the practices applied to keep controls effective.
Access review
Roles and permissions are reviewed on a regular cadence, with least-privilege as the default.
Documented
Penetration testing
Penetration testing runs on a scheduled cadence, with findings tracked to resolution.
Documented
Vulnerability management
Dependencies and services are monitored for vulnerabilities and patched on defined timelines.
Documented
Change management
Releases go through review and staged rollout before reaching production workspaces.
Documented
Incident response
Documented procedures cover detection, containment, notification, and follow-up review.
Documented
Vendor review
Partners are reviewed before onboarding and re-assessed as the relationship continues.
Documented
Need detail for a vendor review?
Our team can walk through our practices, data handling, and platform controls with your reviewers.