Platform /

Security

Verified Security that
Protects Your Data

Outset is GDPR compliant and SOC II certified, running on Microsoft Azure, with strict access controls, best-in-class infrastructure, and no PII required. Your data stays safe, private, and fully protected. And we don’t train on your data. Ever.

or

Book Demo

Features Highlight

Check out a few features that make Outset's security best-in-class.

SOC 2 Type 2 Certified

The gold standard to running research with confidence — ensuring that participant data is secure, private, and enterprise-ready.

GDPR Compliant

Built to honor user consent, control, and privacy, so you can confidently run research across the EU and beyond.

Collect insights on trusted cloud infrastructure for secure, scalable research that meets enterprise IT standards.

Our Key Principles

At Outset, data privacy is of utmost importance — we are dedicated to safeguarding all sensitive data with utmost care.

01

Access should be confined to those with a legitimate business requirement, adhering to the principle of least privilege.

01

Access should be confined to those with a legitimate business requirement, adhering to the principle of least privilege.

01

Access should be confined to those with a legitimate business requirement, adhering to the principle of least privilege.

02

Security controls should be layered according to the principle of defense-in-depth.

02

Security controls should be layered according to the principle of defense-in-depth.

02

Security controls should be layered according to the principle of defense-in-depth.

03

Security controls must be uniformly enforced across the entire organization.

03

Security controls must be uniformly enforced across the entire organization.

03

Security controls must be uniformly enforced across the entire organization.

04

Control implementation should be iterative, maturing in improved effectiveness, increased auditability, and reduced friction.

04

Control implementation should be iterative, maturing in improved effectiveness, increased auditability, and reduced friction.

04

Control implementation should be iterative, maturing in improved effectiveness, increased auditability, and reduced friction.

Data Privacy and Protection

Data at Rest

All datastores containing customer data, including any additional data repositories, are encrypted at rest. We also use row-level encryption for sensitive data collections.

Data at Rest

All datastores containing customer data, including any additional data repositories, are encrypted at rest. We also use row-level encryption for sensitive data collections.

Data at Rest

All datastores containing customer data, including any additional data repositories, are encrypted at rest. We also use row-level encryption for sensitive data collections.

Data in Transit

Outset employs TLS 1.3 and higher for data transmission over potentially insecure networks.

Data in Transit

Outset employs TLS 1.3 and higher for data transmission over potentially insecure networks.

Data in Transit

Outset employs TLS 1.3 and higher for data transmission over potentially insecure networks.

Secret Management

We use robust key management systems to manage encryption keys securely. All application secrets are encrypted and securely stored, with access strictly regulated.

Secret Management

We use robust key management systems to manage encryption keys securely. All application secrets are encrypted and securely stored, with access strictly regulated.

Secret Management

We use robust key management systems to manage encryption keys securely. All application secrets are encrypted and securely stored, with access strictly regulated.

Vulnerability Scanning

Outset incorporates vulnerability scanning at crucial points of our Secure Development Lifecycle (SDLC).

Vulnerability Scanning

Outset incorporates vulnerability scanning at crucial points of our Secure Development Lifecycle (SDLC).

Vulnerability Scanning

Outset incorporates vulnerability scanning at crucial points of our Secure Development Lifecycle (SDLC).

Enterprise Security

Endpoint Protection

All enterprise devices are centrally managed, equipped with advanced endpoint protection software, and monitored for security alerts around the clock.

Endpoint Protection

All enterprise devices are centrally managed, equipped with advanced endpoint protection software, and monitored for security alerts around the clock.

Endpoint Protection

All enterprise devices are centrally managed, equipped with advanced endpoint protection software, and monitored for security alerts around the clock.

Vendor Security

We employ a risk-based approach to assess vendor security, taking into account factors such as access to customer and corporate data, integration with production environments, and potential harm to the Outset brand.

Vendor Security

Security Education

Outset provides robust security training to all employees and regularly shares threat briefings with team members.

Security Education

Outset provides robust security training to all employees and regularly shares threat briefings with team members.

Security Education

Outset provides robust security training to all employees and regularly shares threat briefings with team members.

Identity and Access Management

Outset uses advanced IAM solutions to secure our identity and access management. Employees are granted access to applications based on their role and immediately deprovisioned upon termination.

Identity and Access Management

Outset uses advanced IAM solutions to secure our identity and access management. Employees are granted access to applications based on their role and immediately deprovisioned upon termination.

Identity and Access Management

Outset uses advanced IAM solutions to secure our identity and access management. Employees are granted access to applications based on their role and immediately deprovisioned upon termination.

Trusted by the best

See what users at leading companies think of Outset

Outset is now a key tool for our team to get more, better, and most importantly, faster research done, accelerating our innovation pipeline substantially.
Michael Widenmeyer
Consumer Insights Senior Manager
The speed and quality of the responses were outstanding. Outset will afford my team the opportunity to significantly increase the speed of delivery.
Wil Readinger
Head of UX Research
Outset's AI engaged users and asked follow-up questions that elicited specific, long-form answers that helped us understand what was important to them. And it did so at 10x-20x scale of customer interviews.
Jeff Zimmerman
Chief Product Officer
Outset allows users to spend their time on what really matters, which is understanding the consumer and designing products, rather than on countless hours of interviewing and labeling.
Leo Velásquez
Senior Experiment Designer
Outset saved us over 120 hours of research on a single project while delivering high quality insights that cannot be achieved with a survey. This is the future of research.
Brynna Mann
Managing Director
Outset saves our team countless hours by conducting hundreds of interviews in days rather than weeks, allowing our small team to operate at the scale of a much larger one and at a fraction of the cost.
Ben Schweitzer
Director User Experience