Security

Built for trust at every layer.

Reviews are reputation infrastructure. We protect the data behind them with hardened defaults, isolated environments and controls you can audit.

TLS 1.3 + AES-256 SOC 2 Type II GDPR + UK DPA 2018 99.99% uptime
Security · live signal
Uptime
99.99%
Rolling 12 months
Mean response
11m
Sev-1 incidents
Pentest cycle
Q1·Q3
Independent firm
Audit events
100%
Tamper-evident
Verified & audit-logged
99.99%
Uptime
11m
Mean response
Q1·Q3
Pentest cycle
100%
Audit events
Voices

What teams say after their first 90 days.

Verified quotes from UK service firms running ScoreReviews in production — operators, partners and clinical leads.

"Security replaced three tools and a spreadsheet. The verification ladder is the part our compliance team actually trusts."
Priya Shah
Head of Operations, Holborn Tax Advisory
"We shipped in an afternoon. The first verified review landed inside an hour, the first reply was drafted by AI and approved in seconds."
James Whitfield
Managing Partner, Mayfair Legal
"Direct booking conversion went up 38% the month we embedded the widget. Nothing else in the funnel changed."
Dr. Amara Okafor
Clinical Director, Northern Clinics Group
Capabilities

Everything you need, animated into one workflow.

Encryption everywhere

TLS 1.3 in transit, AES-256 at rest, per-tenant key isolation on enterprise plans.

Explore Encryption everywhere

SOC 2 aligned

Access reviews, change management, vendor risk and incident response mapped to SOC 2 TSC.

Explore SOC 2 aligned

SSO & SCIM

SAML 2.0 and SCIM 2.0 for Okta, Entra ID, JumpCloud and Google Workspace.

Explore SSO & SCIM

Tamper-evident audit log

Every moderation, reply, invite and admin action signed and queryable.

Explore Tamper-evident audit log

Network isolation

Tenant-scoped storage, private VPC peering and IP allow-listing on request.

Explore Network isolation

Resilient infra

Multi-AZ Postgres, point-in-time recovery and tested failover runbooks.

Explore Resilient infra
Live preview

Verification ladder you can prove.

Every review carries a signed verification tier. Buyers see the difference between an open submission and a client-confirmed engagement — and you can audit every step.

Client Confirmed
Matched against engagement records
L4
Invitation Verified
Submitted via tokenised invite
L3
Email Verified
Confirmed via secure email loop
L2
Unverified
Open submission, no source proof
L1
Integrations

Plug into the tools your team already runs on.

Native connectors for every major CRM, helpdesk, accounting platform and scheduler — plus a typed REST API and signed webhooks for the rest.

Browse the catalogue
HubSpot
CRM
Salesforce
CRM
Pipedrive
CRM
Xero
Finance
QuickBooks
Finance
Calendly
Scheduling
Slack
Comms
Microsoft Teams
Comms
Zapier
Automation
Make
Automation
Shopify
Commerce
WooCommerce
Commerce
Defence in depth

Six layers from request to storage.

1

Edge

WAF, rate limits, bot heuristics and TLS 1.3 termination.

2

Identity

SSO, SCIM, hardware-key MFA and role-scoped sessions.

3

Service

Signed RPC, per-tenant secrets, ephemeral credentials.

4

Data

AES-256, KMS-rotated keys, PITR and immutable audit log.

Comparison

How ScoreReviews compares on security posture.

Independent reviews demand independent infrastructure.

CapabilityScoreReviewsTrustpilotGoogle Reviews
SOC 2 Type II report
Per-tenant key isolation
SCIM 2.0 provisioning
Tamper-evident audit log
EU + UK data residency
Signed webhooks
Who it's for

Built for the operators that take reputation seriously.

Three shapes of customer use this every day. Pick the closest match — the playbook follows.

Mandate-grade

Professional services

Accountants, solicitors and consultants use verified reviews to win mandate work without a single testimonial page.

Read a playbook
Per-site analytics

Multi-location brands

Clinics, dealers and hospitality groups roll out brand-consistent collection across every site, with per-location dashboards.

Read a playbook
Tenant-scoped

Marketplaces & networks

Co-ops, franchises and B2B marketplaces share a single verification standard while keeping member data isolated.

Read a playbook
Outcomes

The numbers we're measured on.

Aggregate outcomes across UK service firms using ScoreReviews in production. Refreshed quarterly, methodology published.

+38%
Conversion uplift
On product & service pages
47%
Median response rate
Across verified invitations
< 24h
Moderation SLA
Human-reviewed, every item
4.7×
Year-one ROI
Across 200+ UK firms
Included on every plan

Security isn't an upsell.

  • Role-based access control with custom roles
  • Scoped API keys per environment
  • Webhook signature verification
  • Backups with point-in-time recovery
  • Rate limiting and abuse detection
  • Quarterly penetration testing summary
Security FAQ

The questions our security team gets most.

Primary regions are London (eu-west-2) and Dublin (eu-west-1). US tenants can opt into us-east-1. We do not replicate review data outside the chosen region.

Ready when you are

Run reviews on infrastructure you can audit.

Request our trust report, SOC 2 letter and architecture overview.

Demo rating · platform preview UK GDPR aligned Independent moderation