Trust and Compliance
Effective date: 28 October 2026
Linkrunner is a mobile measurement partner (MMP) that processes attribution, device, and campaign data on behalf of app growth teams. This page lists the certifications and controls that cover that data. To download reports and certificates, visit the Linkrunner Trust Center at trust.linkrunner.io.
1. Certifications and frameworks
- AICPA SOC 2 Type 2: Our SOC 2 Type 2 report attests our controls based on the security, privacy, availability, and confidentiality trust services criteria.
- ISO 27001:2022: Security controls for the systems that process attribution, event, and campaign data.
- GDPR: We have worked hard to enhance our products, processes, and procedures to ensure our practices are GDPR-compliant.
- DPDPA: Data handling aligned with India's Digital Personal Data Protection Act.
- CCPA: Privacy controls that support the California Consumer Privacy Act.
- COPPA: Safeguards that support the Children's Online Privacy Protection Act.
2. How your data is protected
- Data is encrypted in transit and at rest.
- Linkrunner does not use device fingerprinting.
- Fraud protection is included on every plan, so fake installs and click spam are filtered before they reach your reports.
- Teams that need raw attribution events inside their own cloud can run the Bring Your Own Cloud data plane.
3. Policies and documents
- Trust Center: SOC 2 Type 2 report, ISO 27001 certificate and security documents on request.
- Data processing agreement
- Privacy policy
- Vulnerability disclosure policy
4. Frequently asked questions
4.1 Is Linkrunner SOC 2 compliant?
Yes. Linkrunner holds an AICPA SOC 2 Type 2 report covering the security, privacy, availability, and confidentiality trust services criteria. Request the report through the Linkrunner Trust Center at trust.linkrunner.io.
4.2 Is Linkrunner ISO 27001 certified?
Yes. Linkrunner is ISO 27001:2022 certified for the systems that process attribution, event, and campaign data.
4.3 Is Linkrunner GDPR compliant?
Yes. Linkrunner's products, processes, and procedures are designed to be GDPR-compliant, and a data processing agreement is available at linkrunner.io/legal/dpa.
4.4 Does Linkrunner follow India's DPDP Act?
Yes. Linkrunner's data handling is aligned with India's Digital Personal Data Protection Act, and the privacy policy sets out the rights of Data Principals in India.
4.5 Does Linkrunner use device fingerprinting?
No. Linkrunner does not use fingerprinting. Data is encrypted in transit and at rest.
4.6 Can our attribution data stay inside our own cloud?
Yes. With Bring Your Own Cloud, the attribution data plane runs in your cloud account while Linkrunner manages the control plane.
4.7 Where can I get Linkrunner's security documents?
Request the SOC 2 Type 2 report, ISO 27001 certificate, and other security documents through the Linkrunner Trust Center at trust.linkrunner.io.
4.8 Is Linkrunner the same as NetAlly's LinkRunner network tester?
No. Linkrunner (linkrunner.io) is a mobile measurement partner (MMP) for app growth teams, covering attribution, deep linking, and campaign analytics. NetAlly's LinkRunner is an unrelated handheld network and cable tester.