Security & Compliance

UserVoice is Section 508 Compliant

UserVoice is section 508 compliant & WCAG2 AAA compliant. This means we‘ve built UserVoice to modern standards to ensure that UserVoice sites are as accessible as possible to those using screen readers or other accessibility technology.

Section 508 ✓

UserVoice is PCI DSS Compliant

UserVoice doesn‘t store credit card information in our database (all credit card data is stored securely in our payment gateway, Braintree, which is also PCI compliant), but credit card information does transit through our system so we‘ve verified as Payment Card Industry Data Security Standard (PCI DSS) compliant. This compliance is handled by SecurityMetrics and includes a self-questionnaire and quarterly security scan (last scan September 15, 2016) of our servers.

Safe Harbor

UserVoice is able to be used by U.S. Government entities

We’ve worked with the GSA to amend our standard Terms of Service to comply with restrictions specific to United States federal laws and regulations. The complete details of this amendment can be found here: Amendment to UserVoice Terms of Service.