Trust & security

Your pricing data, handled with care.

Costs, margins and strategy are some of the most sensitive data a retailer has. Here is exactly how Retailgrid stores it, who can touch it, and where we are on formal certification - stated plainly, with nothing implied.

retailgrid.io/pricing
Retailgrid pricing grid showing live competitor prices, price ranges, and competitor analysis across SKUs
How we protect your data

European infrastructure. Explainable by design.

Four commitments we can stand behind today.

EU hosting & GDPR

Retailgrid is built and operated in the EU. Customer data is hosted on Google Cloud and Microsoft Azure in European regions, and we process personal data in line with GDPR. A DPA is available on request.

Read the privacy policy

Encryption & access control

Data is encrypted in transit and at rest on our cloud infrastructure. Access to customer data inside Retailgrid is role-based and limited to the people who need it to support your account.

Talk to us

Certification in progress

We are preparing for ISO 27001 and SOC 2. To be clear: we do not hold these certifications yet - this page will state it plainly the day we do. Ask us for the current status anytime.

Ask about status

Auditability built in

Every price change in Retailgrid is recorded - which rule, which agent, which approval. The same audit trail that makes pricing explainable makes the platform accountable.

See agentic pricing
Security questions

What buyers ask us

Where is my data hosted?
On Google Cloud and Microsoft Azure, in European regions. Data does not leave the EU as part of normal platform operation.
Are you ISO 27001 or SOC 2 certified?
Not yet. Certification work is underway, and we would rather tell you that plainly than imply otherwise with a badge wall. We are GDPR-compliant today, and we're happy to walk your security team through our current practices and timeline.
Who at Retailgrid can see my pricing data?
Access is role-based and limited to the team members supporting your account. Every access path is credentialed - there is no shared, blanket access to customer data.
Can we sign a DPA?
Yes. A data processing agreement is available on request as part of contracting - ask your contact or reach out via the contact page.

Have your security team ask us the hard questions.

We'll answer directly - current practices, certification timeline, and where your data lives.