Trust / security
Security & data protection
Last updated: 19 October 2026. This page describes the security measures in place for the CoreSignal Agency website and platform.
No certification claimed. CoreSignal Agency does not hold a security certification of its own. This page describes the measures in place; it is not an audit report or a guarantee.
Website
- The site is served only over encrypted connections (HTTPS), hosted and delivered by Cloudflare, which also provides protection against attacks and abuse.
- Pages are sent with security headers that restrict the sources of scripts and content, block embedding by other sites and limit access to the microphone to our own pages.
- Website requests are stored in Cloudflare D1 and sent to our CRM; the form never asks for card details.
Platform and accounts
- Access to the CoreSignal platform (
app.coresignalagency.com) is through individual user accounts; each client manages its users and their permissions. - Invitations let each user set their own password; our assistants never ask for it.
- Card payments are processed by Stripe on its secure payment pages; we do not receive full card numbers.
Where your data is
Your data is processed by the providers listed in our Privacy Policy: Cloudflare (website and form submissions), HighLevel / LeadConnector (platform, CRM, chat and voice assistants) and Stripe (payments). Each applies its own security controls; security is a shared responsibility between them, us and each client for its own workspace.
Report a security issue
Report a suspected security issue to [email protected] with enough detail to investigate. Do not include passwords or unnecessary personal data.