Trust Center
Security, privacy, and compliance documentation for enterprise customers
Public Documentation
Compliance statements and overview documents available for download.
Security Overview
High-level security assessment covering data handling, encryption, and infrastructure.
SecurityGLBA Statement Credit Unions
Gramm-Leach-Bliley Act compliance statement explaining NPI handling and data protection.
Financial ServicesNacha 2026 Compliance Brief Credit Unions
How ScamZero supports ACH fraud prevention requirements effective March 2026.
Financial ServicesFERPA Statement Higher Ed
Statement on Family Educational Rights and Privacy Act compliance and student data handling.
Higher EducationData Deletion Policy
Policy on automatic data retention, user deletion rights, and GDPR/CCPA compliance.
PrivacyVPAT / Accessibility
Voluntary Product Accessibility Template documenting WCAG 2.1 Level AA conformance.
AccessibilitySubprocessor List
List of third-party vendors and infrastructure providers with their security certifications.
SecurityBusiness Continuity Plan
Disaster recovery procedures, RTO/RPO targets, and infrastructure resilience documentation.
SecurityIncident Response Plan
Security incident detection, response procedures, and 72-hour customer notification process.
SecuritySecurity Testing Statement
Explanation of our serverless architecture and security testing approach for pen test inquiries.
SecurityDetailed Security Documentation
In-depth security documentation available with email verification.
Information Security Policy
Comprehensive security policy covering data protection, access control, and incident response.
SecurityData Flow Diagram
Visual documentation of how data moves through ScamZero systems and third-party integrations.
SecurityHECVAT Lite Higher Ed
Higher Education Community Vendor Assessment Toolkit - security questionnaire for educational institutions.
Higher EducationVendor Risk Management Policy
How ScamZero evaluates, monitors, and manages third-party vendors to address fourth-party risk concerns.
SecurityAI Governance Statement AI
How we use AI for scam analysis, data handling practices, and governance oversight.
SecurityNDA Required
Audit reports and certifications available under non-disclosure agreement.
Common Questions
Plain-language answers to the compliance questions we hear most.
Are you FERPA compliant?
Yes, for universities. ScamZero does not collect, store, or process student educational records. The scam-checking tool is anonymous by design — no login required, no identity captured.
Are you compliant with NCUA guidance?
ScamZero is designed to support credit unions' obligations under NCUA's cybersecurity and member protection guidance. We do not act as a third-party data processor for member data — submissions are anonymous and auto-deleted.
What is your SOC 2 status?
We are pursuing SOC 2 Type II certification. In the meantime, Cloudflare's Infrastructure SOC 2 Type II report is available under NDA above, and our full security posture is documented in the public and gated sections above.
Do you sell or share submitted content?
Never. We do not sell, share, license, or use submitted content for any purpose beyond providing the instant analysis to the person who submitted it.
Questions?
For compliance inquiries or to request additional documentation, contact us at:
security@scamzero.com