Minty's Trust Center
Minty runs on data, so protecting it is part of the product. Here you’ll find the independent reviews we’ve completed, the policies that govern how we handle information, and the safeguards we use every day.
An independent audit firm examined our Minty Shopper Engagement Services system against the Security trust services criteria set by the American Institute of Certified Public Accountants (AICPA). The examination confirmed our security controls were suitably designed.
Customers and prospects can request a copy of the report under NDA. Request the report
TrustArc reviews our privacy practices and privacy notice against its certification standards. When we make material changes to our privacy notice, TrustArc reviews them before they go live.
You can confirm our certification directly with TrustArc. Verify with TrustArc
How we collect, use and share information for Minty Shop and Minty for Business. Minty Shop policy · Minty for Business policy
Opt out of the sale of your personal information. Manage your settings
The terms for using Minty's services. Read the terms
See the current status of Minty's services, including any incidents or scheduled maintenance. Check Status
Personal data is encrypted in transit and at rest. Data moving between browsers and our servers travels over TLS 1.2 or higher. Stored data sits on AES-256 encrypted drives, and every Minty laptop uses full-disk encryption.
Firewalls and encryption protect the public gateways data passes through. Clients’ suppression lists move only over SFTP, and we connect to third-party suppression-list APIs only when they support HTTPS/TLS.
We follow the principle of least privilege: only staff who need personal data to deliver our services can reach it. Staff access requires strong passwords, single sign-on and multi-factor authentication.
Minty runs on cloud providers whose data centers use perimeter security, video surveillance, intrusion detection and access controls. Our database servers are hardened, patched regularly and open only to authorized users and services.
Our web application was penetration tested in June 2026. Findings are tracked and fixed by severity through our engineering process.
Everyone at Minty completes cybersecurity training each year, and 100% of our team finished it in October 2026. Employees, contractors and vendors who handle personal data sign agreements that limit how they may use it.
Request our SOC 2 report, send a security questionnaire or ask about how we handle data. Reach out to your Minty account team or email us at [email protected]. Contact our team