generated: '2026-08-13'
method: searched
probe: true
source: https://www.listrak.com/privacy-and-terms/security-policy
notes: >-
  Listrak runs no dedicated trust center. `trust.listrak.com` does not resolve, and
  `/security`, `/compliance` and `/security-and-compliance` on www.listrak.com all 404. What it does
  publish is a Security Policy page plus a Privacy Policy in its `/privacy-and-terms/` legal
  section, reachable from the site footer. Those pages are the whole of Listrak's public trust
  surface, and they are prose - there is no downloadable report, no NDA-gated portal, and no
  certification badge wall.
url: https://www.listrak.com/privacy-and-terms/security-policy
certifications: []
certifications_note: >-
  NO certification is named anywhere on Listrak's public site. The Security Policy says the company's
  "security posture and privacy protections are audited and tested by three (3) separate
  third-parties" each year but does not say against which framework, and no SOC 2, ISO 27001,
  PCI DSS, HIPAA, FedRAMP or CSA STAR claim appears. Recorded as an empty list on purpose - absence
  of a named certification is the finding.
compliance_programs:
- name: EU-U.S. Data Privacy Framework
  status: self-certified (stated by Listrak)
  source: https://www.listrak.com/privacy-and-terms/privacy-policy
- name: UK Extension to the EU-U.S. Data Privacy Framework
  status: self-certified (stated by Listrak)
  source: https://www.listrak.com/privacy-and-terms/privacy-policy
- name: Swiss-U.S. Data Privacy Framework
  status: self-certified (stated by Listrak)
  source: https://www.listrak.com/privacy-and-terms/privacy-policy
- name: CCPA / CPRA
  status: consumer-rights disclosures published; automated via the Privacy REST API
  source: https://www.listrak.com/privacy-and-terms/privacy-policy
- name: GDPR
  status: data-subject deletion automated via the Privacy REST API
  source: https://api.listrak.com/privacy
legal_pages:
- name: Privacy Policy
  url: https://www.listrak.com/privacy-and-terms/privacy-policy
- name: Acceptable Use Policy
  url: https://www.listrak.com/privacy-and-terms/acceptable-use-policy
- name: Security Policy
  url: https://www.listrak.com/privacy-and-terms/security-policy
- name: Vulnerability Disclosure Policy
  url: https://www.listrak.com/privacy-and-terms/responsible-disclosure
- name: Copyright Notification
  url: https://www.listrak.com/privacy-and-terms/copyright-notification
evidence:
- source: https://www.listrak.com/privacy-and-terms/security-policy
  http_status: 200
  keywords: [security policy, encryption, third-party audits, vulnerability disclosure, monitoring]
- source: https://www.listrak.com/privacy-and-terms/privacy-policy
  http_status: 200
  keywords: [data privacy framework, ccpa, gdpr]
- source: https://trust.listrak.com
  http_status: 0
  note: does not resolve
- source: https://www.listrak.com/security
  http_status: 404