Method behind every claim. Brand-lift studies on Justify follow the same architecture you'd find in any peer-reviewed marketing-science paper. No EMV, no engagement-as-outcome — every read is an exposed-versus-control comparison with the design declared up front.
ICO-registered controller. Cyber Essentials Plus certified. SOC 2 Type II audit underway; readiness letter and contractual assurances available on request.
Standard DPA on request. Sub-processor categories are public; the named list is supplied to customers under DPA. Panel data never crosses borders without SCCs or the UK–US Data Bridge.
DPA, latest pen-test summary (under NDA), insurance certificate (professional indemnity + cyber). Available via our live chat to verified business email.