Launching soon. Preferium for agencies is in private preview — partner registration isn’t open yet. Join the waitlist →

Trust & security

Built to be trusted with other people’s sites

An autonomous platform that deploys to live client sites has to hold itself to a higher bar. Here is ours — stated plainly, with no certification theatre: we claim what we run, nothing more.

EU data residency

Client data is stored in the EU (Frankfurt or Stockholm) and processed under GDPR. Pages are served from Cloudflare’s global edge, but the data itself stays in the EU.

DPA & DPO

A Data Processing Agreement is available to every partner, and Preferium AS has a designated Data Protection Officer overseeing how personal data is handled.

Tamper-evident audit trail

Administrative and optimization events are written to a hash-chained audit log — every entry is linked to the previous one, so history cannot be silently rewritten.

Backups & recovery

Client data is backed up and held in the EU, with a documented disaster-recovery process — so an incident means a restore, not a loss.

Per-client isolation

Every end client is its own tenant with strict row-level isolation. Agencies see their portfolio; clients never see each other. Isolation is enforced in the database, not just the UI.

Responsible disclosure

A vulnerability disclosure policy gives researchers a clear, safe channel to report issues — and we want them to. It is a real file, not an intention: /.well-known/security.txt.

Operational transparency

See it running, don’t take our word

Platform status is public, and our trust documentation lives on its own subdomain — DPA, security posture and policies in one place. When something changes, it changes there first.

What we deliberately don’t claim

We are not SOC 2 or ISO 27001 certified today, and we won’t imply otherwise with borrowed badges. What you get instead is the engineering above — verifiable in the product — and a straight answer to any security question you send us viacontact.

Safety in the product itself

The same philosophy runs through the platform: title, meta, H1 and schema deploys are verified on the live page by a real browser and rolled back automatically if it would cause harm — because the biggest security promise an autonomous tool can make is we will not break your client’s site.

Founding partners

Get early access — build your agency on Preferium

Partner registration is opening soon. Join the waitlist and we’ll invite you as a founding partner, with early-access pricing locked in.

No card required. We’ll only email you about your invite.