AdVizion

Security and trust

Your ads are
unreleased work.

We treat them that way: encrypted in transit and at rest, private to your workspace, and never launched until you press Run.

Request the security packEnterprise

Security posture

Updated 28 Oct 2026

  • Encryption in transitEvery connection
  • Encryption at restMedia, reports and records
  • Ad-platform connectionsEncrypted before storage
  • Keys and secretsManaged, never in the browser
  • WorkspacesPrivate by default
  • Ad platform writesCreated paused, you press Run
  • Security reviewsQuestionnaire and DPA on request

Private

every workspace, by default

Paused

every campaign we create, until you press Run

30 days

to remove personal data after account deletion

1

approval link per exact version

How your ad moves

Short path. Every hop encrypted.

Your ad travels from your browser to your workspace, is stored encrypted, and is sent only to the services needed to check it.

YouBrowser or APIAdVizionYour private workspaceStoredEncrypted at restEncryptedEncryptedChecking servicesOnly what the check needsYour ad accountsOnly if you connect themEncryptedConsent · paused
Where your ad goes when you check it. Ad-account connections are encrypted before they are stored.

Controls

What is in place today.

Only controls that run in production now. Nothing here is a plan.

Data protection

  • All traffic to and from AdVizion is encrypted in transit.
  • Uploaded media, reports, briefs and account records are encrypted at rest.
  • Connections to your ad accounts are encrypted by the application before they are stored, with keys held in a managed secrets service.
  • Each workspace's ads, reports and rules are kept separate from every other customer's.

Access

  • Every request is authorised against the signed-in account. One customer cannot read or act on another customer's data.
  • Projects are private by default. Public report links exist only when you create them.
  • Client approval links show one exact version, so nobody approves a file that changed after they looked.
  • Access to production is limited to the smallest set of operators who run the service.

Ad-account connections

  • Connections use the platform's own consent screen. AdVizion never sees your ad-platform password.
  • Access tokens stay on our servers. They are never shown in the product, returned by an API or stored in the browser.
  • Campaigns are created paused. Nothing spends until you press Run.
  • Disconnecting an ad account revokes access and deletes the stored connection.

Accountability

  • Reviews, fixes and approvals are recorded with who acted, on which version, and when.
  • Decision Reports keep the evidence each verdict was based on.
  • Data from your ad accounts is not sold and is not used to train AI models.
  • Server secrets never reach the browser.
Two engineers reviewing an access dashboard

Your data, your call

Delete it any time.

  • Delete your creative dataOne request removes your uploads, reviews and reports from the product.
  • Close your accountPersonal data is removed within 30 days, unless the law requires us to keep it.
  • Disconnect ad accountsAccess is revoked and the stored connection is deleted. Your campaigns stay in your ad account.
  • Export on requestEmail privacy@advizion.ai and we send you your data.

Built for procurement

We complete security questionnaires and vendor assessments, and work directly with your security team through review.

Security pack, DPA and subprocessors

Our security questionnaire answers, data processing agreement and current subprocessor list are shared with customers on request.

Report a vulnerability

Email security@advizion.ai. We acknowledge reports promptly and coordinate disclosure with you.

How we handle data from connected ad accounts is set out in our privacy policy.

Enterprise review

Photos on this page are AI-generated illustrations.