Etropo
Etropo is marketing budget software. Customers trust it with budget plans, spend actuals and the account data of the people who manage them.
Security, reliability, privacy and compliance are part of how we build and run Etropo, from the first design to daily operations.
This page shows how we protect customer data, in terms you can check. It lists every control with its status, the vendors that process customer data and the policies we follow.
Subprocessor changes, security notices and compliance milestones. Subprocessor additions are posted here before the vendor receives any customer data.
Published 22 October 2026
The three application log tables are now pruned automatically. Integration token audit logs (who connected or disconnected an integration, and token events) are kept for 1 year; integration sync logs and inbound webhook events for 90 days. A scheduled job runs once a day and deletes every row older than its period.
Before today these tables kept every entry since they were created.
Published 21 October 2026
The full list of vendors that process customer data is now public, including the AI model providers (Anthropic, OpenAI, Mistral AI), monitoring and analytics tools (Sentry, Mixpanel, Segment, Braintrust) and support tooling (Intercom, Linear). Customer-connected integrations are listed separately.
Future additions will be announced in this feed before they take effect. To get them by email, use Subscribe to updates at the top of the page.
Published 15 June 2026
This site expands on the security page on www.etropo.com. It lists the controls we run with their status, the vendors that process customer data, the policies we follow, and answers to the questions security reviewers ask most.
It is also the public record of our SOC 2 Type II readiness work. Controls marked planned or partial will be updated here as they are completed.
Published 15 January 2026
Our standard Data Processing Agreement is now published. It incorporates the EU Standard Contractual Clauses (Module Two) with the UK Addendum and Swiss adaptations. It lists the technical and organisational measures we run and carries the subprocessor list as an annex.
It applies to every customer automatically with the Terms of Service, so there is nothing to sign. Customers whose procedures require a countersigned copy can complete the signature page and send it to security@etropo.com.
