Security & privacy

Identity verification, consent, privacy rights, retention, data processing, data residency, and the widget security model.

In this section

Identity verification, consent, and the widget security model.

Require signed widget tokens and mark configured claim values as verified.

What the API key does, what it doesn't, and how the widget stays inside the trust boundary.

Control non-essential data scopes without blocking response collection.

How customers and respondents can ask for GDPR, DSAR, access, deletion, correction, or privacy-rights help.

How deletion, anonymization, retention review, and deletion exceptions work for GDPR and privacy reviews.

How EU data residency and regional processing requirements work for customer rollouts.