Cybercrime is becoming increasingly rampant, and SurveyCake prioritizes the security of users' survey data. Whether it's a trivia quiz, a wedding RSVP, or a group-buying form involving personal data, we strictly protect your survey data with the highest standards!
Your Survey Data
ISO 27001 Information Security Management System
SurveyCake has obtained the ISO/IEC 27001:2022 Information Security Management System international certification. ISO 27001 is an internationally recognized information security management standard aimed at helping organizations establish, implement, operate, monitor, evaluate, and improve their Information Security Management System (ISMS). Being ISO 27001 certified signifies our strict requirements and commitment to information security.
The ISO 27001 certification covers the establishment, implementation, maintenance, and continuous improvement of the information security management system, assisting SurveyCake in fully protecting the confidentiality, availability, and integrity of customer data, and defending against threats and vulnerabilities.
Moreover, the survey data collected via SurveyCake is stored in the state-of-the-art IaaS (Infrastructure as a Service) provider — Amazon Web Services (AWS) cloud servers (public cloud). AWS rigorously guards cloud security and serves countless enterprises in 190 countries worldwide, including Unilever, Spotify, Airbnb, MediaTek, and Expedia. AWS also holds security certifications like ISO/IEC 27001:2013, 27017:2015, 27018:2019, and ISO/IEC 9001:2015, so you can use SurveyCake with confidence.
Once your information enters the SurveyCake system, we ensure data security through multiple layers of encryption and access control mechanisms. We use the Transport Layer Security (TLS) protocol (TLS 1.2 & TLS 1.3) for data transmission encryption (end-to-end, including data within the AWS virtual private cloud), and Advanced Encryption Standard (AES) with 256-bit keys for encrypting static data (including data backups).
Your Personal Information
In addition to data storage, SurveyCake has always prioritized user personal information and privacy. Therefore, we do not proactively view or edit users' survey content (including received survey feedback). Rest assured. If you have any questions about SurveyCake's privacy policy, we recommend referring to our website's Privacy Policy.
If you have more stringent requirements for survey data security, you can consider the SurveyCake Enterprise Plan. SurveyCake can set up a dedicated AWS server (private cloud) for you or store the collected survey data on your company's own server. This way, you can control data flow and prevent sensitive data leakage. Feel free to fill out this form, and we will get in touch with you!
Respondents' Personal Data: Encrypted Question
Concerned about the risk of personal data leakage when multiple team members share the same SurveyCake account for survey collection? You can use the Encrypted Question (ENTERPRISE only) to protect respondents' personal data! Even when multiple users share the same account, you don't need to worry! Of course, the best practice is to use Enterprise Plan's permission management to properly arrange user permissions and prevent data leaks. Here's how to use the Encrypted Question on SurveyCake:
Firstly, after creating the survey, drag and drop a Encrypted Question to your survey.
Then enable Text Validation to set up encrypted questions, such as "Name," "Phone," "E-mail," and other similar questions.
Enable Text Verifacation
To protect user's privacy, not everyone has the authorization to view this detailed data. Only "Super Admin" has the access to view survey results, reducing the risk of data leakage.
Non-Encrypted Questions
For unauthorized accounts, such as admins, members, and guests, data collected from the Encrypted Question will be encrypted with "*" as shown in the image below:
Encrypted Questions
Unauthorized accounts will also be unable to export the details.
Personal data is a critical issue in today's society, involving data storage, access, and analysis. Through appropriate encryption technology and privacy protection methods, SurveyCake ensures that user information is effectively safeguarded in our hands.
Frequently Asked Questions
Why do I see a website warning when I open the survey using Safari?
This issue mainly arises from Apple's iOS 16 onwards, where Tencent checks the website security for users in China and Hong Kong, leading to SurveyCake's surveys being misidentified as unsafe websites. Therefore, you might find that users in China and Hong Kong can't easily open surveys using Safari.
Due to the unpredictable factors in China's Tencent network mechanism, it's difficult for us to change this situation from our side. This issue should only affect iPhone users with iOS 16 and later versions; respondents using different system versions or Android should still be able to view surveys normally.
Our technical team has officially appealed to Apple, and below are the temporary solutions for your reference:
Method 1: Use Google Chrome browser to open the survey.
Method 2: Temporarily disable "Fraudulent Website Warning" in iPhone settings, and enable it again after completing the survey.
To disable: Go to iOS "Settings" > "Safari" > Turn off "Fraudulent Website Warning" (turning off this feature may have potential risks, please consider carefully).
Can I upgrade for a higher security protection?
SurveyCake offers diverse security protection upgrade options, such as login security verification, penetration testing, and whitelisting, to ensure the security and privacy of your surveys. Here's a brief introduction to each add-on service:
Login Security Verification: All survey responses are collected through secure HTTPS connections, and all other traffic between respondents' web browsers and the SurveyCake website uses encrypted connections through the Secure Sockets Layer (SSL). In addition to standard account and password login, you can also opt for reCAPTCHA protection or upgrade other login methods, such as Enterprise AD system login, SSO Single Sign-On, and Two-Factor Authentication.
Penetration Testing: Conducted by a team with rich information security knowledge and experience. Throughout the testing process, the penetration testing team plans the testing content based on hacker thinking and behavior patterns, and uses various hacker software tools and techniques to practically assess the strength of the target's network security.
Whitelisting: Enables you to easily conduct "restricted" survey activities. Through customized list uploads, only personnel on the list will have survey filling permissions. This is suitable for various exhibitions, event occasions, internal corporate surveys, etc., allowing you to have 100% control over survey respondent qualifications.
Our corporate clients come from many top global companies, and they are trusted by customers in security-oriented fields such as finance, insurance, and technology.
These upgraded plans for further enhancing survey security are currently limited to ENTERPRISE plan. If you want to learn more about how SurveyCake can help you achieve the most comprehensive survey data security requirements, feel free to Contact Us.
Summary
Thank you for entrusting SurveyCake with handling important and confidential survey data. We are committed to maintaining industry security standards to allow you to use our services carefree. We will continue to provide secure and robust survey services in the future.
