Enterprise-Grade Security Designed for Compensation Data

Visit the ERI Trust Center at trust.erieri.com for available security, privacy, and compliance resources.

ERI has completed an SOC 2 examination. Visit the ERI Trust Center for available SOC 2 information.

The ERI Trust Center is useful for customers, prospects, IT teams, legal teams, procurement teams, compliance teams, and vendor management reviewers.

• Internal security documentation, policies, and procedures
• Compliance documentation and audit results
• Privacy resources

ERI makes protecting your data our core responsibility. We employ a defense-in-depth approach with multiple layers of technical, administrative, and physical controls to safeguard customer data. This includes uploaded files, prompts, documents, images, and usage history. All data are encrypted at rest and in transit. Access to data follows strict Role-Based Access Controls (RBAC), ensuring uploaded data are only accessible to authorized users based on role, team, and explicit permissions. Least privilege principles are enforced across the organization. Customer data are logically separated. We leverage secure infrastructure, continuous monitoring, intrusion detection, and advanced threat protection. We validate with annual penetration testing, ongoing vulnerability management, and SOC 2 auditing to address any risks before they can impact customers. We do not use customer data to train AI models. You retain ownership of your data at all times. We provide support for exporting or purging your data.

Transparency: We provide clear, accessible information on how we collect and analyze data, making us the trusted source for compensation data.

Data Ownership and Control: You own your data.

Compliance and Governance: We support major privacy regulators. ERI aligns with industry standards through independent audits, SOC 2 compliance, and internal review.

Security is only the beginning. ERI builds lasting trust through transparency, genuine data ownership, ethical development and data analytics, and meaningful user input, feedback, and control.

At ERI, we maintain a rigorous security posture through regular, independent validation of our systems. We conduct comprehensive annual penetration testing performed by qualified, third-party security firms to proactively identify and remediate potential vulnerabilities. We implement continuous internal vulnerability scanning, code reviews, and targeted assessments throughout the year. Results are always reviewed by leadership and our security team.

ERI’s security program aligns with industry best practices and supports our compliance with SOC 2.

We conduct penetration testing annually.

ERI is committed to respecting intellectual property rights while providing the best compensation management platform globally. We maintain processes to report violations and ensure a clear process for handling claims.