Security / trust page — found from the homepage — CUX

Cited by

Facts read from this source

• GDPR Report an error

  “GDPR-compliant”

• Encryption Report an error

  “TLS 1.2+ & AES-256 encrypted”

• EU storage Report an error

  “EU-based data storage”

• Code audit Report an error

  “Code audit-ready”

• Data masking Report an error

  “Sensitive inputs are masked in the browser so nothing personal is ever exposed.”

• Rbac Report an error

  “Our role-based access control (RBAC) system and least-privilege policies ensure the right people access the right data.”

• Data centers Report an error

  “We host only in ISO 27001-certified data centers in Frankfurt, Warsaw, Roubaix, and Strasbourg, protected by firewalls, DDoS mitigation, and 24/7 monitoring.”

• Sast Report an error

  “We apply secure coding practices, peer code reviews, and regular static application security testing (SAST) throughout development ensuring software quality and operational resilience from the ground up.”

• Incident response Report an error

  “We follow formal security policies, conduct regular audits, and maintain tested incident response protocols, ensuring we’re prepared, accountable, and continuously improving.”

• Minimal collection Report an error

  “CUX only tracks the behavioral data required for analysis. No keystrokes, no personal identifiers.”

• Audit readiness Report an error

  “We’ve passed multiple enterprise-led security reviews with no findings.”

• Self hosting Report an error

  “We offer client-side script hosting and access to our tracking logic for enterprise clients, enabling internal audits, self-hosting, and full visibility into what’s collected and how.”

• Pii collection Report an error

  “No. By default, all sensitive inputs such as form fields are automatically masked in the user’s browser before any data reaches CUX servers. No personally identifiable information (PII) is collected or stored.”

• Masking configuration Report an error

  “Enterprise clients can configure additional masking using CSS classes, GTM, or advanced privacy settings.”

• Entity Report an error

  “CUX Research Sp. z o. o.”

• Registration Report an error

  “NIP: PL8943142798 REGON: 383714872 KRS: 0000792391”

• Headquarters Report an error

  “Fabryczna 6 53-609 Wrocław, Poland”

• Offices Report an error

  “Lohmühlenstraße 65 12435 Berlin, Germany Rua do Crucifixo 40, 1100-183 Lisboa, Portugal”

• Platform modules Report an error

  “Web Analytics Mobile App Analytics Behavioral Insights”

7 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CRO Consultant Consent & visitor tracking
• The CRO Consultant Snippet performance & flicker
• The CRO Consultant European sovereignty
• The Data Protection Officer Snippet performance & flicker
• The Data Protection Officer European sovereignty
• The E-Commerce Manager Snippet performance & flicker
• The E-Commerce Manager European sovereignty
• The Growth Lead Snippet performance & flicker
• The Growth Lead European sovereignty
• The Product Engineer Snippet performance & flicker
• The Product Engineer European sovereignty
• The Skeptic Snippet performance & flicker
• The Skeptic European sovereignty