Teads Trust Center

generated: '2026-08-13'
method: searched
source: https://www.teads.com/security/
description: >-
  Teads publishes a "Security at Teads" trust page describing its security
  program: a formal ISMS, SOX compliance as a public company, annual third-party
  penetration testing, a HackerOne bug bounty, encryption in transit and at
  rest, regional data residency, and 24/7 internal SOC monitoring. Named
  certificate artifacts (SOC 2 / ISO 27001 reports) are NOT published — the page
  says Teads "holds several security accreditations" and directs requesters to a
  business representative, so those remain unnamed and gated.
trust_page:
  url: https://www.teads.com/security/
  status: 200
  title: Security at Teads
  self_service_portal: false
  note: >-
    A static trust page, not a document-request portal (no Vanta/Drata/SafeBase
    style trust center was found).
certifications:
- name: SOX (Sarbanes-Oxley)
  status: claimed
  evidence: >-
    "As a public company Teads is SOX compliant and also holds several security
    accreditations."
  named_report: false
- name: unnamed security accreditations
  status: claimed-unnamed
  evidence: >-
    Teads states it holds accreditations but does not name them; access is via a
    business representative.
  named_report: false
  gap: >-
    No SOC 2, ISO 27001, PCI DSS, HIPAA or FedRAMP artifact is named or
    downloadable.
program:
  isms:
    formal: true
    evidence: "There is a formally implemented and maintained Information Security Management System throughout the Enterprise."
  risk_management: true
  external_audits: true
  penetration_testing:
    cadence: annual
    party: independent third parties
  vulnerability_monitoring: continuous, real-time triage
  secure_sdlc: true
  security_awareness_training: all employees
  soc: internal SOC monitored 24/7
  bc_dr:
    tested: annually
    basis: business impact analyses
access_security:
  logging: All user access logged; log access on auditable least-privilege basis.
  least_privilege: true
  access_review_cadence: semiannual
  sso: required for all employees, with frequent reauthentication
  data_lake_access: MFA-protected VPN or SSH only
network_security:
  waf: true
  firewall_acls: strict
data_security:
  encryption_in_transit: true
  encryption_at_rest: true
  minimum_tls: TLS 1.2
  data_lifecycle: purged and deleted at end of life per retention policy
  residency:
    principle: Data is hosted in the region it is collected and does not transfer between regions.
    cloud_regions: [USA, Ireland, Netherlands, Japan, Singapore]
    on_premise: [USA, Netherlands, Singapore]
    transfers: First-party analytical data may transfer under SCCs.
ai_policy:
  published: true
  claims:
  - Teads only uses AI to improve productivity and optimize ROI of delivered services.
  - Teads will never sell customer data.
  - Humans remain involved in training and integration; usage aligned to applicable regulations.
  source: https://www.teads.com/security/
fraud_and_phishing:
  contact: scam@teads.com
  policy: >-
    Teads never contacts individuals through social media or personal accounts
    to conduct business, and prohibits private transfer or sale of accounts.
privacy:
  privacy_policy: https://www.teads.com/privacy-policy/
  advertising_privacy_portal: https://privacy-policy.teads.com/
  modern_slavery_statement: https://privacy-policy.teads.com/Modern-Slavery-Act-Statement.pdf
evidence:
- url: https://www.teads.com/security/
  status: 200
- url: https://www.teads.com/privacy-policy/
  status: 200
- url: https://privacy-policy.teads.com/
  status: 200
- url: https://www.teads.com/trust-center/
  status: 404
  note: No dedicated trust-center path exists; the security page is the trust surface.
cross_links:
  vulnerability_disclosure: security/teads-vulnerability-disclosure.yml
  domain_security: security/teads-domain-security.yml
  conformance: conformance/teads-conformance.yml