MarqOps connects to your marketing data and brand assets, so we treat security as a first-class part of the product — not an afterthought. Here’s exactly how your data is handled.
Current compliance status
Supabase and Vercel maintain their own provider-level compliance programs, but their attestations do not transfer to MarqOps. We will not describe MarqOps as SOC 2 compliant unless MarqOps completes its own applicable audit and can substantiate that statement.
MarqOps currently uses Supabase and Vercel. Each provider publishes information about its own SOC 2 Type II program within its service boundary. Those provider attestations do not certify MarqOps or replace controls we are responsible for operating.
The published MarqOps application is served over HTTPS. Our managed hosting and database providers document encryption for their services. Production secrets are kept out of the codebase and are available only to server-side runtime paths that require them.
MarqOps uses tenant identifiers, Postgres row-level security, server-side authorization checks, and automated isolation tests to restrict access between workspaces. These controls reduce risk; they are not a guarantee that defects or misconfiguration are impossible.
Google integrations request scopes tied to the features MarqOps implements. Integration credentials are handled on the server and protected by managed storage and access controls. You can revoke Google access from your Google account or disconnect an integration in MarqOps.
Our stated practice is not to sell customer brand data, analytics, or content to advertisers or data brokers. Account-deletion requests are handled under our Privacy Policy, including any applicable retention, legal, and managed-backup limitations.
MarqOps supports Google OAuth and one-time magic-link sign-in, so the application does not ask users to create a MarqOps password. Administrative routes use explicit authentication and role checks.
Found a security issue? We appreciate responsible disclosure. Email info@marqops.com and we’ll respond quickly.
Questions about data handling? See our Privacy Policy.
Security is an ongoing risk-management process. No internet service can guarantee absolute security, and this page describes current practices rather than providing a certification.