Security

Built for trust at every layer.

Reviews are reputation infrastructure. We protect the data behind them with hardened defaults, isolated environments and controls you can audit.

TLS 1.3 + AES-256 SOC 2 Type II GDPR + UK DPA 2018 99.99% uptime
Security · live signal
Uptime
99.99%
Rolling 12 months
Mean response
11m
Sev-1 incidents
Pentest cycle
Q1·Q3
Independent firm
Audit events
100%
Tamper-evident
Verified & audit-logged
99.99%
Uptime
11m
Mean response
Q1·Q3
Pentest cycle
100%
Audit events
Voices

What teams say after their first 90 days.

Verified quotes from UK service firms running ScoreReview in production — operators, partners and clinical leads.

"Security replaced three tools and a spreadsheet. The verification ladder is the part our compliance team actually trusts."
Priya Shah
Head of Operations, Holborn Tax Advisory
"We shipped in an afternoon. The first verified review landed inside an hour, the first reply was drafted by AI and approved in seconds."
James Whitfield
Managing Partner, Mayfair Legal
"Direct booking conversion went up 38% the month we embedded the widget. Nothing else in the funnel changed."
Dr. Amara Okafor
Clinical Director, Northern Clinics Group
Capabilities

Everything you need, animated into one workflow.

Encryption everywhere

TLS 1.3 in transit, AES-256 at rest, per-tenant key isolation on enterprise plans.

Explore Encryption everywhere

SOC 2 aligned

Access reviews, change management, vendor risk and incident response mapped to SOC 2 TSC.

Explore SOC 2 aligned

SSO & SCIM

SAML 2.0 and SCIM 2.0 for Okta, Entra ID, JumpCloud and Google Workspace.

Explore SSO & SCIM

Tamper-evident audit log

Every moderation, reply, invite and admin action signed and queryable.

Explore Tamper-evident audit log

Network isolation

Tenant-scoped storage, private VPC peering and IP allow-listing on request.

Explore Network isolation

Resilient infra

Multi-AZ Postgres, point-in-time recovery and tested failover runbooks.

Explore Resilient infra
Live preview

Verification ladder you can prove.

Every review carries a signed verification tier. Buyers see the difference between an open submission and a client-confirmed engagement — and you can audit every step.

Client Confirmed
Matched against engagement records
L4
Invitation Verified
Submitted via tokenised invite
L3
Email Verified
Confirmed via secure email loop
L2
Unverified
Open submission, no source proof
L1
Integrations & API

Connect verified security reviews with every tool your team already runs on.

ScoreReview plugs directly into your CRM, helpdesk, accounting stack, scheduler and commerce platform so verified customer reviews, invitations and reply workflows move with your existing pipeline — no CSV exports, no brittle Zaps, no duplicate data entry. Every native connector is OAuth-secured, field-mapped and observable from the ScoreReview dashboard.

Prefer to build it yourself? A typed REST API, signed webhooks and a first-party JavaScript SDK give engineering teams a production-grade path in under an hour, with idempotency keys, per-tenant rate limits and full audit trails on every write.

OAuth 2.0 Signed webhooks REST + SDKs SOC-ready audit log GDPR data residency Sandbox environments
40+
Native connectors
99.98%
Webhook delivery
< 200ms
Median API latency
Live · 12 connectors
OAuth 2.0
01
HubSpot
CRM
02
Salesforce
CRM
03
Pipedrive
CRM
04
Xero
Finance
05
QuickBooks
Finance
06
Calendly
Scheduling
07
Slack
Comms
08
Microsoft Teams
Comms
09
Zapier
Automation
10
Make
Automation
11
Shopify
Commerce
12
WooCommerce
Commerce
REST API
Typed OpenAPI
Webhooks
HMAC-signed
SDKs
TS · Python · Go
Defence in depth

Six layers from request to storage.

1

Edge

WAF, rate limits, bot heuristics and TLS 1.3 termination.

2

Identity

SSO, SCIM, hardware-key MFA and role-scoped sessions.

3

Service

Signed RPC, per-tenant secrets, ephemeral credentials.

4

Data

AES-256, KMS-rotated keys, PITR and immutable audit log.

Comparison

How ScoreReview compares on security posture.

Independent reviews demand independent infrastructure.

CapabilityScoreReviewTrustpilotGoogle Reviews
SOC 2 Type II report
Per-tenant key isolation
SCIM 2.0 provisioning
Tamper-evident audit log
EU + UK data residency
Signed webhooks
Who it's for

Built for the operators that take reputation seriously.

Three shapes of customer use this every day. Pick the closest match — the playbook follows.

Mandate-grade

Professional services

Accountants, solicitors and consultants use verified reviews to win mandate work without a single testimonial page.

Read a playbook
Per-site analytics

Multi-location brands

Clinics, dealers and hospitality groups roll out brand-consistent collection across every site, with per-location dashboards.

Read a playbook
Tenant-scoped

Marketplaces & networks

Co-ops, franchises and B2B marketplaces share a single verification standard while keeping member data isolated.

Read a playbook
Outcomes

The numbers we're measured on.

Aggregate outcomes across UK service firms using ScoreReview in production. Refreshed quarterly, methodology published.

+38%
Conversion uplift
On product & service pages
47%
Median response rate
Across verified invitations
< 24h
Moderation SLA
Human-reviewed, every item
4.7×
Year-one ROI
Across 200+ UK firms
Included on every plan

Security isn't an upsell.

  • Role-based access control with custom roles
  • Scoped API keys per environment
  • Webhook signature verification
  • Backups with point-in-time recovery
  • Rate limiting and abuse detection
  • Quarterly penetration testing summary
Security FAQ

The questions our security team gets most.

Primary regions are London (eu-west-2) and Dublin (eu-west-1). US tenants can opt into us-east-1. We do not replicate review data outside the chosen region.

Ready when you are

Run reviews on infrastructure you can audit.

Request our trust report, SOC 2 letter and architecture overview.

Demo rating · platform preview UK GDPR aligned Independent moderation