Skip to content
NewProduct Q&A: shoppers ask on your product page and get your answers.See how it works
IdukkiIdukki
Enterprise

UGC at the scale your procurement team signs off on.

SOC 2 in audit, GDPR self-certified and a pre-signed DPA. Built for multi-brand groups, regulated industries and global retail, priced in plain bands your finance team can read.

Talk to salesRead the security overview

The procurement pack

1 UK business day
  • DPA + SCCs, pre-signed
  • Sub-processor register
  • SIG-Lite questionnaire
  • SOC 2 audit status note (in audit)(Type II in progress)
  • MSA redlines accepted

One ZIP, no sales call required. Full detail on the security + DPA page.

What enterprise plans add.

  • Security + compliance

    SOC 2 is in audit (not certified yet). GDPR + UK GDPR self-certified. DPA available pre-signed. Data hosted in AWS eu-west-2 (London).

  • Roles + access

    Role-based access per user, with email or Google sign-in. SAML single sign-on and SCIM provisioning are not available yet.

  • Rights + provenance

    A complete audit trail per piece of content: source, request, approval, expiry. Built for regulated industries.

  • Multi-language, CDN-served

    Hosted in one AWS region (London) today. Hreflang built in. The widget is served from a global CDN.

  • Multi-brand + reseller

    Workspace-per-brand with consolidated billing. Agency portal for 10+ sub-accounts. Custom domains.

  • Dedicated support

    Dedicated CSM. Slack Connect support. Quarterly business reviews.

The security review, without the fortnight of email.

Every document your reviewer will ask for is written, current and ready to send. Here is how the review actually runs.

  1. 01

    You ask

    Email or the form below. No discovery call required to get documents.

  2. 02

    The pack lands

    One ZIP within one UK business day: DPA, SCCs, sub-processors, SIG-Lite, audit note.

  3. 03

    Your review runs

    Architecture and security questions answered in writing. MSA and DPA redlines negotiated, not refused.

  4. 04

    You sign

    Annual or multi-year terms. Procurement portals and PO flows accepted.

Procurement-friendly answers

Where is data stored?
AWS eu-west-2 (London). One region today; multi-region failover is on the roadmap.
Sub-processors
AWS, Vercel, Sanity, Cloudflare, Postmark, Twilio, Sentry, Anthropic. Full list in the DPA.
Penetration testing
No third-party pen test yet; one is planned as part of SOC 2 readiness. Automated dependency scanning runs on every repository.
Backup + DR
Daily snapshots with 30-day retention. DR drills have not been run yet; they are planned.
Vulnerability disclosure
Report to security@idukki.io; coordinated disclosure within 90 days or when fixed. No paid bug bounty. Policy at idukki.io/security#report.
Custom contracting
MSA, DPA and SCCs negotiable. Procurement reviews accepted. Annual or multi-year terms available.

Replacing an enterprise tool?

All comparisons
Live in minutesDTC + B2B brands79 KB runtimeReal G2 reviews

Enterprise

SOC 2 in audit, DPA, UK hosting. Get the procurement pack.

A dedicated solutions engineer, a security questionnaire pre-filled, and a 30-day pilot scoped to your stack.

Talk to enterprise salesRead the security overview
  • No credit card
  • Cancel anytime
  • GDPR self-certified · SOC 2 (in audit)