--- title: "Security & GDPR: ISO 27001 Certified | Scratcher" description: "Scratcher is ISO 27001 certified and GDPR-friendly. User roles, two-factor login, and you decide what data you collect and when it is deleted." url: https://scratcher.io/security language: en --- ![Your data is safe with us](https://scratcher.io/img/containers/assets/illustrations/security-0.webp/fceb5f00595129941443167054b7ff19/security-0.webp) Security & GDPR # Your data is safe with us Scratcher is ISO 27001 certified — an international standard for keeping information safe. You decide what you collect, how you ask for consent and when data is deleted. [Start free trial](https://platform.scratcher.io/en/register) [Book a meeting](https://scratcher.io/book-a-meeting) [Read the security FAQ](https://scratcher.io/security/faq) Trusted by brands like Burger King, Toyota and WWF ![Burger King](https://scratcher.io/img/containers/assets/customers/burger-king.webp/2ca5da614e753e24c0a4daa1bc7cdc36/burger-king.webp) ![Starbucks](https://scratcher.io/assets/customers/starbucks.svg) ![Toyota](https://scratcher.io/img/containers/assets/customers/toyota.webp/1271455b4bf9afdf498873d87d3ec72b/toyota.webp) ![Siemens](https://scratcher.io/img/containers/assets/customers/siemens.webp/3f31d7262dc11bfb8056d860df0c78c9/siemens.webp) ![Scania](https://scratcher.io/img/containers/assets/customers/scania.webp/376bb4c8edc8637e633433395d8e9a8f/scania.webp) ![Swatch](https://scratcher.io/img/containers/assets/customers/swatch.webp/c15e804a29875a7e0975ba79dd997273/swatch.webp) ![Wolt](https://scratcher.io/img/containers/assets/customers/wolt.webp/73e2df78990c49580b6097abaff414ba/wolt.webp) ![Swisscom](https://scratcher.io/img/containers/assets/customers/swisscom.webp/00c131c10738c46b7cebc565188507b8/swisscom.webp) ![OBI](https://scratcher.io/img/containers/assets/customers/obi.webp/428d0e53f7079252152574ecf47d111b/obi.webp) ![Migros](https://scratcher.io/img/containers/assets/customers/migros.webp/610d9f3a9482d8e91e2b1e0eaf545c98/migros.webp) ![Change Lingerie](https://scratcher.io/img/containers/assets/customers/change-lingerie.webp/77ad06bc6bb09c8bbb0a59cdd1b2b9bf/change-lingerie.webp) ![Anthon Berg](https://scratcher.io/img/containers/assets/customers/anthon-berg.webp/64b8867453ceb4625873b1fd0f0de730/anthon-berg.webp) ![WWF](https://scratcher.io/img/containers/assets/customers/wwf.webp/c7d4651524fee0894b24baa0201a33b1/wwf.webp) Safe by design ## Security you don't have to think about ISO 27001 certifiedWe follow an international standard for keeping information safe, with regular reviews. GDPR-friendlyYou own the data. We process it on your behalf, under a data processing agreement. You're in controlDecide what you collect, how you ask for consent and when data is deleted. --- ![ISO/IEC 27001:2022 certificate for Scratcher ApS from Bureau Veritas, with the Bureau Veritas "Certified ISO 27001" badge](https://scratcher.io/img/containers/assets/security/iso-27001-certificate.webp/a67c1030e713ea18176ae9aa0aa5ed8d/iso-27001-certificate.webp) ISO 27001 ## Certified to ISO/IEC 27001:2022 Scratcher ApS is certified to ISO/IEC 27001:2022 by Bureau Veritas. The certificate covers how we develop, sell and support our software for interactive campaigns — including how we collect and protect data and permissions. - Certified by Bureau Veritas - Valid until 7 November 2028 - Encryption, access control and two-factor login - Access only for employees who need it [Download the certificate (PDF): Certified to ISO/IEC 27001:2022](https://scratcher.io/assets/security/scratcher-iso-27001-certificate.pdf) Your data, your rules ## You decide what you collect — and when it is deleted When you run a campaign, you are the data controller for the data your players enter. Scratcher processes it on your behalf as a data processor, under a data processing agreement. You choose exactly what to ask for and how long to keep it. - Ask only for the information you need - Your own consent text and double opt-in - Delete player data automatically when a campaign ends - Send sign-ups straight to your email tool or CRM ![You decide what you collect — and when it is deleted](https://scratcher.io/img/containers/assets/illustrations/security-4.webp/6441777534b924bd1dabb5c68246cf03/security-4.webp) ![The right access for every person](https://scratcher.io/img/containers/assets/screenshots/security.webp/e1924391e95935c2cd60d8e0bc9b85a9/security.webp) Access for your team ## The right access for every person Give each person on your team the access they need — and nothing more. Two-factor login keeps accounts safe, even if a password gets out. - User roles for your team - Two-factor login - Separate accounts for each brand or country on Enterprise [See Enterprise: The right access for every person](https://scratcher.io/enterprise) Read more ## How we handle data and accessibility Security FAQAnswers to the questions IT, legal and procurement teams ask: hosting, encryption, access, backups, incidents and more. [Read more: Security FAQ](https://scratcher.io/security/faq) Privacy policyWhat we collect, why, how long we keep it and your rights under the GDPR. [Read more: Privacy policy](https://scratcher.io/privacy-policy) Cookie policyWhich cookies we use, and how to change your choice at any time. [Read more: Cookie policy](https://scratcher.io/cookie-policy) AccessibilityOur website aims to meet WCAG 2.2, level AA. Read how we test it. [Read more: Accessibility](https://scratcher.io/accessibility) --- ![A Starbucks spin-the-wheel campaign made with Scratcher](https://scratcher.io/img/containers/assets/campaigns/starbucks-spin-the-wheel.webp/5cdde820d05e2e4548ae01ec0e7ab2b4/starbucks-spin-the-wheel.webp) ## Make your first campaign today Join the brands that have collected more than 35 million sign-ups with Scratcher. Try it free for 14 days — no credit card required. [Book a meeting](https://scratcher.io/book-a-meeting) [Start free trial](https://platform.scratcher.io/en/register)