Enterprise-grade privacy and security by design.
Trust is foundational at Auros. Privacy, security, and compliance are woven into everything we build – so customers, partners, and participants can trust us with their data.
How We Earn Your Trust
Security
We operate a mature, continuously tested security program that protects the confidentiality, integrity, and availability of customer and participant data. We are independently audited under SOC 2 Type II and ISO 27001 and a third-party provider performs an annual penetration test.
Privacy
We respect individual privacy and are transparent about how personal data is collected, used, and protected across our platform and research network. We are independently audited under ISO 27701.
AI Governance
AI features can access data only within your own workspace. Outputs are traceable and reference the underlying data source, allowing validation. Third-party AI providers we engage are contractually prohibited from training on or retaining customer data beyond immediate use.
Contractual Commitments
We clearly document how data is processed, stored, transferred, and safeguarded — including subprocessors and contractual commitments.
Certifications & Compliance
Global Standards
Auros maintains independent certifications and aligns with global privacy and security frameworks to help customers meet regulatory and procurement requirements with confidence.
SOC 2 Type II
ISO 27001
Information Security Management
ISO 27701
Privacy Information Management
GDPR
EU General Data Protection Regulation
Data Privacy Framework
EU-US / UK-US / Swiss-US
UK Cyber Essentials 3.3
This is some text inside of a div block.
AI Use & Governance
Auros uses AI deliberately, responsibly, and transparently. Auros' AI and ML features are designed as decision-support tools that help customers work faster and surface relevant evidence; they do not make autonomous decisions or take actions on their own. You remain in control of outcomes at every stage.
Your data is not used to train AI
We do not use customer data to train generative AI models or large language models. Third-party AI providers we engage are contractually prohibited from training on or retaining customer data beyond immediate use.
Transparent use
Customers can opt out of generative AI features. Our platform indicates where generative AI is used and where it generates output.
Scoped & auditable
AI features can access data only within your own workspace. Outputs are traceable and reference the underlying data source, allowing validation.
Frequently Asked Questions
Where can I find copies of Auros’s security and privacy policies, audit reports, and other documentation?
Please visit our Trust Center to request access to our documentation (some of which requires a signed NDA to download).
Where can I find more information about the technical and organizational measures employed by Auros to protect our data?
For an overview of our technical and organizational measures, please visit usertesting.com/TOMs.
Is my data used to train generative AI or large language models?
No. Auros does not use customer data — including test recordings, plans, or AI-generated insights — to train generative AI or large language models. Third-party AI providers are contractually prohibited from training on or retaining your data. For more information, please review the following article: UserTesting and Artificial Intelligence.
What service levels does Auros offer?
UserTesting offers several different service levels for customers to choose the type of support that works best for their teams. A description of our different service levels is available at usertesting.com/support-descriptions.
Does Auros meet accessibility standards?
Auros is committed to providing an accessible experience for all of our users, using the Web Content Accessibility Guidelines (WCAG) 2.1, Level AA as our benchmark. Read our Accessibility Statement.
What certifications does Auros hold?
Auros is certified under SOC 2 Type II, ISO 27001, and ISO 27701 and participates in the EU-US, UK-US, and Swiss-US Data Privacy Frameworks. Reports and certificates are available at our Trust Center.
Is our data encrypted?
Yes. Data is encrypted at rest using 256-bit AES encryption and in transit using TLS 1.2 or greater.
Do you support single sign-on?
Yes. Auros supports SSO via SAML 2.0, so you can apply your own authentication and password policies.
Does Auros have a bug bounty program / voluntary disclosure policy?
We take security seriously and welcome the contribution of external security researchers to help us ensure the security and privacy of our users. Please review our Voluntary Disclosure Policy to learn more.
Who can I contact for more information?
You can contact our Security Team via email to security@usertesting.com, and you can contact our Privacy Team via email to privacy@usertesting.com.
