Sensitive fields stay blurred
When a visitor attaches a screenshot, passwords, card details and one-time codes are blurred before it leaves the page, and one attribute on your site masks anything else.
Security
Your feedback data, under your control
Decide how your team signs in, what each role can see and change, and what the survey widget collects from visitors. Every change is recorded in the activity log.
Sign-in your team controls
Let people in through your identity provider, and out again when they leave.
Single sign-on with SAML
Connect Okta, Microsoft Entra ID, Google Workspace, OneLogin, JumpCloud or any SAML provider with a guided setup, and test the sign-in before anyone depends on it. Accounts can be created on first sign-in, and you can require single sign-on for your domain. Business and above.
Two-factor authentication
Protect each account with an authenticator app and recovery codes. The owner can require it for everyone, and sensitive changes ask for a fresh code. Every plan.
People added and removed by your provider
With SCIM 2.0, your identity provider adds people to Usertick and removes them when they leave, so access follows your directory. A changes list shows the last seven days. Business and above.
Every signed-in device in view
See every device signed in to your account and sign out the rest. A sign-in from a new device or country sends you an email, and no session lasts over 30 days.
Access that follows each role
Give each person the access their work needs, with a record of every change.
Roles with exactly the permissions they need
Six roles come ready, from Owner to Member. On Business and above, build your own roles from 16 permissions and limit which surveys each one can open. Nobody can hand out more access than they hold.
An activity log with before and after
See who changed what, with the record before and after. History goes back 30 days on Free, 90 days on Starter and a year on Pro, with no limit on Business.
Your visitors’ IP addresses are never stored. Usertick keeps a salted hash in their place.
Usertick sets no third-party cookies, removes location data from uploaded pictures and blurs sensitive fields in screenshots.
How Usertick handles your data
No IP addresses stored
Usertick keeps a salted hash in place of each visitor’s IP address, never the address itself.
First-party storage only
The widget remembers each visitor with an ID stored on your own site and never sets a third-party cookie.
Anonymous surveys
When candor matters more than names, anonymous responses store no user ID or visitor ID.
Photos without location
Location and camera details are stripped from uploaded pictures before they are stored.
Each organization kept apart
Every request checks who you are and what your role allows, and each organization’s data is kept apart from every other organization’s.
Secrets locked away
Keys, tokens and other secrets are stored only in hashed or encrypted form.
Erasure on request
When someone asks to be forgotten, erase everything they sent through the REST API on Pro and above.
Deletion with a safety window
Deleting an organization or an account takes effect after 14 days, so a mistake can still be undone.
Support access you approve
Usertick staff can open your organization only through a support link someone on your team gives them, and a banner shows while they are in it.
Where your data lives and how it is protected
The basics a security review asks about, in plain words.
- 01
Stored in the United Kingdom
Customer data is stored in the United Kingdom, and uploaded files in the European Union. The sub-processors page lists every provider, what it does and where.
- 02
Encrypted in transit and at rest
Every connection to Usertick is encrypted, and so is the data it stores, including the credentials of the tools you connect.
- 03
Passwords and sessions
Passwords are stored only in a form that can't be read back, and every session ends after 30 days at the longest.
- 04
Backups on a rolling schedule
Backups are overwritten on a rolling schedule, and Usertick doesn’t restore deleted data from them, so a deletion stays a deletion.
AI and your data
The AI features run in the United Kingdom, except the AI reading of survey answers, which runs in the United States under a data processing agreement with the UK transfer addendum. Neither Usertick nor its AI providers train models on your data.
AI at UsertickCertifications and agreements
Usertick processes your customers’ personal data as your processor under the Data Processing Addendum, which applies to every plan. The hosting providers are certified under ISO 27001 and SOC 2; Usertick doesn’t hold these certifications itself and doesn’t sign HIPAA business associate agreements.
Data Processing AddendumPolicies and agreements
Found a security issue?
Write to security@usertick.com. The vulnerability disclosure policy says what is in scope, how to report and the safe harbor for research that follows it.
Frequently asked questions
Okta, Microsoft Entra ID, Google Workspace, OneLogin, JumpCloud and any provider that supports SAML 2.0. Single sign-on and SCIM are on Business and above, and the owner sets them up.
Yes. Once a test sign-in passes, you can require single sign-on so nobody at your domain signs in with a password or Google. The owner keeps a password, so you can still get in if the provider is down.
Yes, on Business and above. A custom role can be limited to chosen surveys, so each team sees only its own.
It uses only first-party storage on your own site, where a visitor ID lasts up to 365 days so repeat rules work. It sets no third-party cookies, and Usertick keeps only a salted hash of the IP address, never the address itself.
Use the REST API on Pro and above to erase one response, or everything one person sent, found by their email or user ID. The erasure also removes the AI readings, notes and files of those responses.
Only through a support link that someone in your organization gives them. A banner shows while the session lasts, and what staff can do during it is limited.
In the United Kingdom, with uploaded files in the European Union. The sub-processors page lists every provider and where it processes data.
No. Neither Usertick nor its AI providers train models on your data.
No. Usertick’s hosting providers are certified under ISO 27001 and SOC 2, and Usertick doesn’t hold these certifications itself.
Listen better, act faster, and build what truly matters.
Start free, see what your customers mean, and get each answer to the person who can act on it.
- 150 responses a month on Free
- Every channel and AI analysis
- No card needed