generated: '2026-08-13'
method: probed
source: https://trust.adquick.com/
notes: >-
  AdQuick operates a public Trust Center at trust.adquick.com, hosted on Vanta
  (DNS CNAME -> 66d814094617356976de24c6.cname.vantatrust.com). It is the only AdQuick web property
  outside api.adquick.com that answers an automated request: www., docs., help. and blog.adquick.com
  all return a Cloudflare 403 bot challenge. The Trust Center returns HTTP 200 with a real Vanta
  trust-report document (title "AdQuick Trust Center", canonical https://trust.adquick.com), but the
  control/certification list is rendered client-side from Vanta's GraphQL API, which rejects
  unauthenticated calls ("Missing `signature` or `signedAt`"). NAMED CERTIFICATIONS COULD THEREFORE
  NOT BE READ, and none are asserted here. No `Compliance` pointer is emitted for that reason - the
  trust center is verified present, its certification set is not.
trust_center:
  url: https://trust.adquick.com/
  title: AdQuick Trust Center
  platform: Vanta
  platform_evidence: >-
    content-location https://assets.vanta.com/static/vite/index-trust-report.vite...html;
    DNS CNAME 66d814094617356976de24c6.cname.vantatrust.com
  public: true
  access_request_required_for_documents: unknown
certifications: []
certifications_readable: false
certifications_blocker: >-
  Vanta trust-report content is JS-rendered; the backing GraphQL endpoint (app.vanta.com/graphql)
  requires a signed request and returns 400 to anonymous clients.
security_posture_statements:
- source: https://trust.adquick.com/ (meta description, served in HTML)
  text: >-
    "At AdQuick, we are committed to ensuring the highest standards of security and trust for our
    users. As a leader in OOH advertising, we take the responsibility of safeguarding your data and
    maintaining confidentiality very seriously."
  note: marketing statement only; not a certification claim
transport_security:
  hsts: 'max-age=31536000; includeSubDomains'
  observed_on: trust.adquick.com
  note: >-
    HSTS is present on the Vanta-hosted trust host but was NOT observed on www., docs. or
    api.adquick.com (see security/adquick-domain-security.yml).
x-evidence:
  fetched: '2026-08-13'
  url: https://trust.adquick.com/
  http_status: 200
  content_type: text/html
  cf_ray: a2a988ca1ff56a56-EWR