Security & GDPR

Your data is safe with us

Scratcher is ISO 27001 certified — an international standard for keeping information safe. You decide what you collect, how you ask for consent and when data is deleted.

Start free trial Book a meeting Read the security FAQ

Trusted by brands like Burger King, Toyota and WWF

Safe by design

Security you don't have to think about

ISO 27001 certified

We follow an international standard for keeping information safe, with regular reviews.

GDPR-friendly

You own the data. We process it on your behalf, under a data processing agreement.

You're in control

Decide what you collect, how you ask for consent and when data is deleted.

ISO 27001

Certified to ISO/IEC 27001:2022

Scratcher ApS is certified to ISO/IEC 27001:2022 by Bureau Veritas. The certificate covers how we develop, sell and support our software for interactive campaigns — including how we collect and protect data and permissions.

Certified by Bureau Veritas
Valid until 7 November 2028
Encryption, access control and two-factor login
Access only for employees who need it

Download the certificate (PDF)

Your data, your rules

You decide what you collect — and when it is deleted

When you run a campaign, you are the data controller for the data your players enter. Scratcher processes it on your behalf as a data processor, under a data processing agreement. You choose exactly what to ask for and how long to keep it.