Nextroll Trust Center

generated: '2026-08-01'
method: searched
probe: true
source: https://security.nextroll.com/
url: https://security.nextroll.com/
platform: SafeBase
public_summary_page: https://www.nextroll.com/trust-center
access_model: >-
  The overview, compliance badges and control list are public. Reports, self
  assessments and policies are gated behind a "start your security review" access
  request.
certifications:
- SOC 2
- ISO 27001
- PCI DSS
- GDPR
certifications_detail:
- name: SOC 2 Type 2
  auditor: Sensiba
  artifact: SOC 2 Type 2 Report (gated)
- name: SOC 3
  artifact: SOC 3 Report (gated)
- name: PCI DSS
  auditor: Security Metrics
  artifact: PCI DSS report (gated)
- name: ISO 27001 - 2013
  status: self-assessment
self_assessments:
- ISO 27001 - 2013
- CAIQ v4.0.2
- SIG Lite
- VSA Full
privacy_and_regulatory:
- GDPR
- CCPA / CPRA
- COPPA
- US state data privacy laws
industry_programs:
- IAB member
- NAI member (NAI Code of Conduct)
- TAG registered
- EDAA certified
documents:
- Network Diagram
- PCI DSS
- Pentest Report
- SOC 2 Type 2 Report
- SOC 3 Report
- Acceptable Use Policy
- Access Control Policy
control_areas:
- Risk Profile (data access level, impact level, recovery time objective)
- Product Security (audit logging, data security, integrations)
- Data Security (access monitoring, encryption at rest, encryption in transit)
- App Security (responsible disclosure, code analysis, credential management)
- Access Control
- Legal (cyber insurance, privacy policy, terms of service)
third_party_security:
- vendor: HUMAN Security
  purpose: ad fraud prevention / ad exposure verification
  source: https://www.nextroll.com/trust-center
contacts:
  data_protection_officer: dpo@nextroll.com
  security: security@nextroll.com
  support: support@nextroll.com
  data_subject_requests: https://nextroll-privacy.relyance.ai
related_pages:
  gdpr: https://www.nextroll.com/trust-center/gdpr
  privacy_choices: https://www.nextroll.com/your-privacy-choices
  privacy_notice: https://www.nextroll.com/privacy
  data_protection_addendum: https://www.nextroll.com/terms/data-protection
reverified:
  date: '2026-08-14'
  by: 0-working/probe-security-programs.py
  result: >-
    Trust center still live at https://security.nextroll.com/ (HTTP 200) with SOC 2,
    PCI DSS and GDPR keywords confirmed. The probe's output is a strict subset of the
    searched detail below, so the searched artifact is retained per the pipeline's
    never-downgrade rule.
evidence:
- source: https://security.nextroll.com/
  http_status: 200
  keywords:
  - soc 2
  - soc 3
  - iso 27001
  - pci dss
  - gdpr
  - ccpa
  - trust center
  - responsible disclosure
- source: https://www.nextroll.com/trust-center
  http_status: 200