Trust Center
Welcome to the Dig Insights Trust Center. Dig Insights is a market research and insights consulting company, founded in 2010, that partners with global brands to deliver high-quality, decision-focused insights. We provide market research and consulting services through professional services and Dig One, our proprietary Software as a Service (SaaS) platform, which integrates our research and analytics capabilities into a unified system.
This Trust Center serves as a comprehensive resource, offering a high-level summary of our commitment to protecting information, respecting privacy, strengthening governance, supporting responsible research, promoting ethical use of technology, and operating with transparency and accountability. Here, you will find detailed information about the administrative, technical, physical, privacy, and research quality safeguards that underpin our work.
Our Digital Trust program is built upon recognized standards and frameworks, including ISO 27001 and ISO 42001. We demonstrate our commitment to these standards through formal assurance activities, including SOC 2 Type II attestation for security and ISO 20252 certification for market, opinion, and social research.
Key aspects of our trust posture include:
- Data Protection and Privacy: We have established policies and procedures for managing personal data throughout its lifecycle, from receipt and consent through retention and destruction. Our Privacy Policy explains how Dig Insights collects, uses, discloses, and processes personal information, defining the rights of individuals who engage with us. We also have policies for the international transfer of personal data.
- Governance, Risk & Compliance: Our Digital Trust program incorporates robust risk management, internal audit, policy governance, supplier oversight, compliance monitoring, and continuous improvement to identify risks and monitor control effectiveness.
- Research Quality: Dig Insights maintains documented research processes to ensure reliable, consistent, ethical, and high-quality market research. Our ISO 20252 certification reflects our alignment with internationally recognized standards for market, opinion, and social research. We also have a Research Data Analysis & Processing Policy that aligns with ISO 20252:2019 requirements.
- Responsible and Ethical AI: We maintain governance over the use and development of AI, including approved use cases, human oversight, privacy and confidentiality requirements, and data protection expectations. Our AI governance practices align with ISO 42001, supporting a structured approach to responsible AI management.
- Continuous Improvement: Our Digital Trust program continuously evolves to meet client expectations, regulatory developments, technology changes, and industry best practices.
Subprocessors
- What privacy laws and regulations are you compliant with?
- Are you aligned with any industry standards or frameworks?
Reports
We may provide security-related reports upon request.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
App Security
We take application security seriously and are putting together a program to monitor internal apps.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Infrastructure
We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.