Infatica Trust Center

Infatica holds four ISO certifications: 27001:2022 (Information Security), 27701:2019 (Privacy Information Management), 22301:2019 (Business Continuity), and 20000-1:2018 (IT Service Management). Infatica also operates under GDPR and CCPA frameworks. SOC 2 Type 2 assessment is on the current compliance roadmap.

All paying customers complete identity verification through Veriff before account activation. Customer use cases are reviewed against the Acceptable Use Policy before access is granted.

Infatica's residential and mobile proxy network is built on consent-based participation. Network peers join through partner applications where participation is disclosed, voluntary, and revocable. This model is consistent with the consent-based SDK sourcing approach discussed in Akamai's 2025 whitepaper.

Prohibited activity includes fraud, attacks on systems the customer does not own, illegal data collection, unauthorized access, account farming, and any activity that violates applicable law. The full list is in the Acceptable Use Policy.

Infatica enforces customer KYC, use-case review at account activation, automated network monitoring, and a response procedure that includes investigation, access restriction, account suspension, and service termination. Partners and customers that violate the AUP are removed from the network.

Infatica supports responsible access to publicly available web data for legitimate business use cases. The Responsible Public Web Data Collection Policy details the position, including restrictions against unauthorized testing, scraping of private data, and any activity that violates applicable law.

The SDK uses only the device's IP address. It does not collect personal data, device identifiers, browsing history, or application data. Two independent firms (Halborn in July 2025 and NCC Group in October 2025) have audited the SDK's security and consent properties; both audit reports are publicly available.

Yes. SDK participation is voluntary, and partner applications are contractually required to provide opt-out controls. Users may revoke consent at any time through the partner application's settings. Network peers may also submit a deletion request through the subject rights process.

Partners are contractually required to disclose SDK participation and obtain explicit user consent. Partners that violate these requirements have SDK access revoked and are removed from the network.

Customers, prospects, and partners can request security and compliance documentation through compliance@infatica.io. Most documents are available directly through the Trust Center. NDA-gated documents are provided after a business purpose review.