Help

Is my data secure?

All traffic between your browser, your CRM, and the Blue Reacher platform is encrypted with TLS, and API access is authenticated with per-customer bearer keys you can rotate at any time. Production access is limited to the people who operate the platform on a least-privilege basis, and customer workspaces are isolated from one another.

You own your data. Request deletion of your account data at any time and it is removed per the privacy policy and applicable law. The practices above are published, in the same words, on the security page, which is the page to send your IT reviewer.

What you'll find there is practices rather than badge walls: what is encrypted, who holds production access, how opt-outs are enforced, what the safeguards on sending are, how deletion works, and how to report a problem. Each claim is specific enough to check, which is the point of publishing them.

Trust here runs in both directions: yours in the platform, and your prospects' in you. Opt-outs are honored immediately and permanently across your account, line health is monitored continuously, and sending is paced to stay conversational, which protects both deliverability and your sender reputation.

Compliance leaves a paper trail on purpose. Every opt-out event lands in a timestamped, exportable audit trail, and blocked send attempts are logged alongside them, which is what teams pull for quarterly compliance reviews and for security questionnaires during enterprise procurement. The mechanics are on the opt-out handling page.

Found a vulnerability? Email support@bluereacher.com with details. Coordinated disclosure is appreciated, and researchers who report in good faith get credited.

Questions that go deeper than the published practices, security questionnaires and compliance posture among them, are answered on a demo call or at support@bluereacher.com.

Updated August 9, 2026