Method behind every claim. Brand-lift studies on Justify follow the same architecture you'd find in any peer-reviewed marketing-science paper. No EMV, no engagement-as-outcome — every read is an exposed-versus-control comparison with the design declared up front.
ICO-registered controller. Cyber Essentials Plus certified. SOC 2 Type II in scope for 2026; happy to discuss the timeline under NDA.
Standard DPA on request. Sub-processor categories are public; the named list is supplied to customers under DPA. Panel data never crosses borders without SCCs or the UK–US Data Bridge.
DPA, latest pen-test summary (under NDA), insurance certificate (professional indemnity + cyber). Available through our contact form or chat to verified business contacts.