Trust Center
At Dscout, protecting your research isn't an afterthought—it's foundational to everything we build and how we work.
We know that bringing research participants into your process means handling sensitive data with care. That's why we've built a security program designed to meet the standards you expect and your participants deserve.
Here you'll find details on our compliance certifications, data handling practices, privacy policies, and the controls we've put in place to keep your research secure. These documents span both Dscout and Private Panel services.
Subprocessors
Trust Center Updates
Critical PHP Vulnerability
Dscout is aware of the critical PHP RCE flaws CVE-2026-109618 and CVE-2026-109619. These vulnerabilities apply to Dscout Private Panels and we have implemented the recommended patches to mitigate risk.
Notice of Subprocessor Change - Anthropic, Braintrust
This communication informs you of a change to Dscout’s subprocessors and should be shared with your Information Security or Third Party Risk Management (TPRM) team. Dscout has updated its vendor chart, available here, and added two new partners, Anthropic and Braintrust, to support AI features on the Dscout platform.
Rest assured that in both cases, your data will not be used to train any model and will only be processed by the subprocessors in support of the Dscout Platform. All data will continue to be stored in the United States. Dscout conducted due diligence to ensure both Anthropic and Braintrust have and maintain the proper safeguards to protect the data. The due diligence process included the following:
- Enforce mandatory security requirements in the contract language
- Assess subprocessor security capabilities
- Review available certification and attestation reports
- Validate compliance with applicable regulations (e.g., General Data Protection Regulation (GDPR) California Consumer Privacy Act (CCPA), and Health Insurance Portability and Accountability Act (HIPAA))
- Identify and ensure remediation of residual risk findings
If you object to this change on reasonable data protection grounds or if you have any other questions about this change, please notify us promptly by contacting [email protected].