generated: '2026-08-13' method: searched probe: true source: https://dotdigital.com/trust-center/ url: https://dotdigital.com/trust-center/ description: >- Dotdigital publishes a named Trust Center covering its ISMS, privacy programme and processor disclosures. Certifications are stated with the certification body and a validation route, which is stronger than the usual badge wall. Note the automated trust-center probe missed this page (its keyword heuristic did not fire on the marketing-site markup); it was confirmed by direct fetch. certifications: - name: ISO 27001 scope: Information Security Management System (ISMS) certification_body: Alcumus ISOQAR certificate_number: '18479' validation: searchable on the Alcumus ISOQAR register - name: ISO 27701 scope: Privacy Information Management System (PIMS) certification_body: Alcumus ISOQAR (UKAS-accredited) - name: Cyber Essentials Plus scope: UK NCSC scheme validation: searchable on the NCSC site - name: CSA STAR scope: Cloud Security Alliance STAR registry listing compliance_programs: - name: GDPR detail: >- Data processing agreements and EU Model Contract Clauses in place between Dotdigital, its subsidiaries and its sub-processors; a Data Protection Officer owns the PIMS. - name: Data processing addendum detail: Published DPA alongside the Terms of Service. - name: Sub-processor disclosure detail: Service Partners section lists processors and the role each plays. contacts: security: security@dotdigital.com privacy: privacy@dotdigital.com operational_transparency: status: https://dotdigitalstatus.com uptime_history: https://uptime.dotdigital.com information_security_policy: published (linked from the Trust Center) evidence: - source: https://dotdigital.com/trust-center/ http_status: 200 keywords: [iso 27001, iso 27701, cyber essentials, csa star, gdpr, trust center, isms] - source: https://dotdigital.com/.well-known/security.txt http_status: 200 keywords: ['Policy: https://dotdigital.com/trust-center/']