Trust & Security
Field teams trust WalkLists with voter files, customer contacts, and the records they collect at the door. Here's how we protect that data — stated plainly, and only what we actually do.
Privacy
- ✓ We do not sell your personal information.
- ✓ No third-party advertising or analytics tracking — no ad pixels, no cross-app tracking.
- ✓ Only strictly-necessary and functional cookies.
- ✓ Every sub-processor we use is disclosed by name.
- ✓ CCPA / CPRA and GDPR data-subject rights are honored.
Security
- ✓ All traffic encrypted in transit with HTTPS / TLS.
- ✓ Field photos kept in a private bucket, served only via short-lived signed links, with EXIF (incl. GPS) stripped.
- ✓ Role-based access (Admin / Manager / Rep) with strict organization isolation.
- ✓ Hardened sessions — Secure, HttpOnly, SameSite cookies + CSRF protection.
- ✓ Payments handled entirely by Stripe (PCI-DSS Level 1); card data never touches our servers.
- ✓ Every deploy passes automated health gates and auto-rolls-back on failure.
Your data & control
- ✓ Your data is yours — admins can export contacts and results at any time.
- ✓ Self-serve account & data deletion, with email verification and a 30-day recovery window.
- ✓ For the contact lists you upload, you are the controller and WalkLists is your processor.
- ✓ Usage logs retained for only 90 days.
Accounts & apps
- ✓ Sign in with Apple offered alongside Google — your choice.
- ✓ Enterprise SSO (SAML) available for larger organizations.
- ✓ Location and camera are used only for canvassing, with your permission — never background tracking.
- ✓ Responsible-disclosure program for security researchers.
What we don't claim. We follow widely accepted security practices and keep improving them, but we do not currently hold formal third-party certifications such as SOC 2 or ISO 27001 — and we'll never claim a certification we don't have. We'll say so here the day that changes.
Read the details
Questions about security or data?
Email [email protected] — we're happy to walk your team or your buyers through how we handle data.