Trust & Security

How data supports a decision, who controls account changes, and where to start your security review.

SOC-2 certified

Consequential is SOC-2 certified. For a security evaluation, bring your requirements to the team and ask for the documentation your review needs.

Ad account decisions stay with people

AdBuyer has no write access to your ad accounts. It recommends; you or your agency make the change inside the platform.

NorthStar MCP access is scoped per user

NorthStar's MCP access is read-only, uses OAuth and is scoped per user. Access is checked on every request against the permissions set in the product.

Each product has its own data scope

UTM Health audits order and customer journey data Shopify already holds, without a pixel or ad account connection. Pixel collects events by design. Review each product's scope rather than assuming they all collect the same data.

Explore your next step