Privacy & Consent
Consent signals travel with the data from collection through to activation, so the choices people make follow their information into campaigns.
Trust & Safety
Advertising on ground you can inspect
A campaign is only as good as the data and the inventory underneath it. The same controls run across privacy, brand safety, traffic quality, and platform security, so buyers and sellers can see what they are working with.
Principles
The commitments behind the platform
Six areas shape how campaign data is collected, delivered, and reported.
Data Protection
First-party data is handled with hashing, access controls, and defined retention. Personal data is never sold.
Brand Safety
Content categories, blocklists and allowlists, and placement-level controls let buyers decide where creative appears.
Fraud & Invalid Traffic
Filtering before and after the bid, aligned to recognised invalid-traffic guidance, plus traffic-quality scoring across supply.
Vendor Management
Partners are reviewed before and during an engagement, with written expectations for data handling and delivery quality.
Platform Security
Encryption in transit, role-based access controls, and activity logging are applied according to the sensitivity of the data handled.
Standards
Built to recognised control requirements
KrelanoSolution builds its practices against widely used security and privacy control requirements, and reviews them as the platform and the surrounding guidance change.
- Security controls built to SOC 2 and ISO 27001 control requirements
- Data processing aligned to UK GDPR, EU GDPR and, where applicable, US state privacy laws
- Consent handling aligned to the major consent frameworks
- Traffic filtering aligned to recognised invalid-traffic guidance
Practices
How controls are kept current and reviewed
Security and privacy work is continuous. These are the practices we apply to keep controls effective.
Access review
Roles and permissions are reviewed periodically, with least privilege as the default.
Ongoing
Security testing
Periodic testing is carried out, with findings tracked through to resolution.
Ongoing
Vulnerability management
Dependencies and services are monitored for known issues and patched according to risk.
Ongoing
Change management
Releases go through review and a staged rollout before they reach production workspaces.
Ongoing
Incident response
Procedures are maintained for detection, containment, notification, and follow-up review.
Ongoing
Vendor review
Partners are reviewed before onboarding and reassessed as the relationship continues.
Ongoing
Need detail for a vendor review?
Our team can walk your reviewers through our practices, data handling, and platform controls.