SerpApi home
Register

Your data is safe with us

SerpApi handles the data of multiple Fortune 500 companies.
We follow the best security, privacy, and compliance practices.

Transparency

As part of our commitment to transparency, we - at SerpApi - continually inform our users about our products and operations. We understand the importance of providing clear information about our audits, compliances, security, and privacy enforcement.

SerpApi security

Trusted by top companies and brands.

  • Nvidia
  • Shopify
  • Perplexity
  • Adobe
  • Samsung
  • KPMG

Security features and policies

Customer trust and data security are critical to everything we do at SerpApi.

  • Encryption

    100% of our website pages, API requests, and resources go through HTTPS. Our SSL certificate is issued by Cloudflare, Inc (ECC CA-3). Encrypted and authenticated using QUIC, X25519, and AES_128_GCM.

  • Password and Credential Storage

    SerpApi made it impossible for anyone to access our user passwords. We use one-way password hashing using the BCrypt hash algorithm for every user. We produce audit logs for all critical parts of SerpApi.

  • Data Security

    AWS S3 and database security (multiple redundancy, encryption in transit even between local servers). We follow a Zero Trust Network doctrine: All of our VPS are assumed to be exposed via the Internet.

Compliance

Building trust through industry-recognized certifications.

  • SerpApi SOC 2 Type II SOC 2

    Service Organization Controls (Soc2) (Type II) Trust Services Principles.

    Acquired

  • SerpApi SOC 2 Type II SOC 3

    Service Organization Controls (Soc3).

    Acquired

  • SerpApi ISO 27001 ISO 27001

    International Standard for Information Security.

    Acquired

  • SerpApi GDPR GDPR

    The General Data Protection Regulation.

    In Progress

Privacy & ISO 27701

SerpApi operates a Privacy Information Management System (PIMS) aligned with ISO/IEC 27701, extending our ISO 27001 certified information security program.

  • Purpose Limitation

    Customer PII processed by SerpApi on behalf of customers is used only for the purpose of providing the contracted services and is not used by SerpApi for unrelated marketing or advertising purposes.

  • Data Retention & Deletion

    Search data expires automatically after 31 days. ZeroTrace Mode prevents search data from being stored entirely. See our Data Retention & Deletion policy.

  • Subprocessors & Privacy Requests

    Our subprocessor list, cookie disclosures, and privacy request routes are published in our Privacy Policy. Privacy contact: privacy@serpapi.com.

All our APIs are covered

All of our APIs are covered by the international specialist insurers Hiscox and RGS.

Hiscox logo

  • Professional Liability E&O Insurance

    We take extra precautions to guarantee our client’s business continuity in case of our objective fault. It's the ultimate shield against professional liability risks.

  • General Liability Insurance

    Our General Liability Insurance coverage provides a safety net, shielding our clients from the financial burdens of third-party bodily injury, property damage, or advertising claims.

  • Cybersecurity Insurance

    Our cybersecurity insurance covers data breaches, cyberattacks, and privacy threats with comprehensive incident response and liability coverage. - via RGS

Security questions?

Don't hesitate to ask. Please get in touch with our support team at security@serpapi.com.

You can find all of our policies here
Contact us