// Trust & Security Report
Seranking Ltd. (UK) / SER Acquisition Inc. (US, Wilmington, Delaware)
AI SEO and GEO (generative engine optimization) platform: rank tracking, keyword/backlink research, site audit, and AI visibility monitoring (SE Visible - tracks brand mentions across ChatGPT, Gemini, Perplexity, AI Overviews). Also includes an API/MCP data connector for pulling SEO data into third-party tools and AI assistants, and Planable, a social media scheduling/collaboration platform acquired by SE Ranking in August 2025 and operated as a related but distinct product with its own site (planable.io).
Certifications held
1
Maturity
Growth
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on seranking.com“The Privacy Policy contains a dedicated EEA/GDPR section covering rights of access, rectification, erasure, and data portability. The vendor's Processors page states international transfers are "governed either by the existence of an adequacy decision issued by the European Commission or, in the absence of such a decision, by the Standard Contractual Clauses issued under the EU Commission Implementing Decision (EU) 2021/914 of 4 June 2021," and for UK data by "the International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses (SCCs)."”
> Show 8 unconfirmed / not-held certifications
source: seranking.comNo public evidence found. No trust center, security page, or SOC 2 mention exists anywhere on seranking.com (home page, privacy policy, processors page, or terms of service), and no independent source references a SOC 2 report for SE Ranking / Seranking Ltd.
source: seranking.comNo public evidence found on the vendor domain or via independent search for an ISO 27001 certification held by Seranking Ltd. / SER Acquisition Inc.
source: seranking.comThe Terms of Service state the platform is "not designed to process sensitive or regulated personal data (e.g., health, financial, government-issued identifiers)," indicating HIPAA-regulated data is explicitly out of scope rather than supported.
source: seranking.comNo public evidence of PCI DSS certification. Privacy policy names Stripe as the third-party payment processor, indicating SE Ranking does not itself handle card data directly.
source: seranking.comNo public evidence found on the vendor domain.
source: seranking.comNo public evidence found. SE Ranking markets AI-powered features (AI Visibility Tracker, SE Visible) but has no published AI governance certification.
source: seranking.comNo public evidence found on the vendor domain.
source: seranking.comNo public evidence found; not relevant to this vendor's customer base (SMB/agency SEO tooling, not a US government cloud offering).
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Not specified on the vendor's privacy policy or any captured page. No dedicated data-residency or infrastructure/security page was found to confirm hosting region(s) or data center provider.
Privacy Policy: "SE Ranking does not use any of the personal data processed in accordance with current Privacy Statement for the purposes of developing, improving, or training generalized Artificial Intelligence (AI) and/or Machine Learning (ML) models." Terms of Service, regarding BVA (AI-powered) features such as SE Visible, separately state: "Provider does not use Customer Content or Outputs generated through BVA Features to train, fine-tune, or improve third-party AI models, subject to the terms of applicable Third-Party AI Services." Both documents are internally consistent (no legacy-ToS vs current-AI-page contradiction found); the caveat is that third-party AI providers underlying BVA/AI Visibility features are governed by their own separate terms, which SE Ranking does not control.
// Security controls
General security measures
Privacy policy states only in general terms: "We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure," with no technical specifics (no stated encryption standard, no named data center, no audit cadence).
seranking.comEncryption in transit / at rest
n/a - not verified. No page found stating a specific encryption standard (e.g., TLS version, AES-256).
seranking.comSub-processors
A dedicated processors page lists third parties (e.g., Stripe for payments/analytics) and commits to notifying customers two weeks in advance of onboarding a new processor.
seranking.comData retention
Varies by purpose per the privacy policy: customer support data retained 5 years, payment data up to 10 years, marketing communications 5 years, consent-based processing until consent is withdrawn.
seranking.comCustomer backup responsibility
Terms of Service place responsibility for content accuracy and backups on the customer: "Customers are solely responsible for regularly backing up their Customer Content."
seranking.comLiability cap
Provider's aggregate liability is capped at total amounts paid by the customer in the 12 months preceding the claim.
seranking.com// Products & data scope
data: Customer's tracked domains, keywords, competitor data, and account/billing information. Not designed for sensitive/regulated personal data per ToS.
Flagship product; API and MCP connector let customers pull this data into ChatGPT, Claude, Cursor, or their own reporting stack.
data: Brand/competitor mention and citation data pulled from third-party AI platforms (ChatGPT, Gemini, Perplexity, AI Overviews, AI Mode).
Uses third-party AI services (BVA Features); ToS states SE Ranking does not use customer content from these features to train third-party AI models, but disclaims responsibility for the accuracy of third-party AI outputs.
data: Social media content, approval workflows, client/team collaboration data, connected social account credentials.
Acquired by SE Ranking in August 2025 and still operates under its own domain (planable.io) with its own legal/privacy terms; treat as a related but separately governed product until fully integrated into SE Ranking's legal stack. This assessment covers seranking.com only; a Planable-specific review is recommended if listing Planable separately.
// What to watch
- No trust center or dedicated security page found on seranking.com; security posture is documented only in general, non-technical language inside the privacy policy.
- No SOC 2, ISO 27001, or other independent third-party security certification found on the vendor domain or via independent search - graded held=false as an honest absence, not a capture gap (multiple targeted searches and direct page fetches turned up nothing).
- Data hosting region/data center location is undocumented publicly; cannot confirm EU/US/other residency for AIFOXX data-residency-sensitive buyers.
- Multi-entity structure: site operates under both Seranking Ltd. (UK) and SER Acquisition Inc. (US/Delaware) depending on customer billing currency/region - list the vendor as the corporate group, not a single legal entity.
- Planable (acquired Aug 2025) is a related product on a separate domain (planable.io) with likely separate legal/privacy documents; do not assume SE Ranking's privacy/security posture automatically extends to Planable without separate verification.
- ToS explicitly excludes sensitive/regulated data (health, financial, government ID) from intended use - flag this to any AIFOXX buyer considering the tool for regulated-data workflows.
// At a glance
Pricing model
Subscription tiers (plan-based, agency/team seat add-ons) plus a free trial; no credit card required to start trial per homepage.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Seranking Ltd. (UK) / SER Acquisition Inc. (US, Wilmington, Delaware)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-09. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
seranking.com