SECURITY & DATA PROTECTION
At Readex Research we take our clients’ and survey participants’ security seriously.
As a survey research company, we understand the value of data and the trust our clients place in us. Readex Research maintains a comprehensive set of security measures to protect you, your organization, and your survey participants at every stage of the research process.
Encrypted Connections
All Readex Research websites and survey platforms are served exclusively over HTTPS, ensuring that every connection between a respondent’s browser and our servers is encrypted. HTTP connections are not permitted.
• TLS 1.2 and TLS 1.3 – All surveys and web properties use Transport Layer Security (TLS), the modern standard for encrypting data in transit. TLS 1.3, the current protocol version, provides faster handshakes and stronger security guarantees than its predecessors. Older, vulnerable protocol versions (SSL 3.0, TLS 1.0, TLS 1.1) are disabled on all our servers.
• AES-256 Encryption – Our servers are configured to prefer AES-256 cipher suites for encrypting data in transit. AES-256 is the same encryption standard used by financial institutions and government agencies, with a key space of 2256 possible combinations, making brute-force decryption computationally infeasible.
• SSL/TLS Certificates -Our certificates are issued by a trusted Certificate Authority (CA) and validate that visitors are communicating with a legitimate Readex Research server. Certificates are automatically renewed to prevent lapses.
Infrastructure, Access Controls & Storage Security
Our technical infrastructure is designed to minimize risk and limit exposure.
• Access controls – Internal systems are protected by role-based access controls, ensuring staff can only access data relevant to their responsibilities.
• Data at Rest Encryption – All data stored on our servers is protected using full-disk encryption. This ensures that stored data — including survey response data, client files, and system data — remains unreadable to unauthorized parties even in the event of physical theft or unauthorized hardware access. Encryption is enforced at the operating system level across all machines in our environment.
• Software patching – Operating systems and application software are kept up to date with security patches on a regular basis.
• Monitoring – We monitor our systems for anomalous activity and maintain processes to respond to and contain potential security incidents.