Security at SolerAds

Access reviewed by Google

• Google Partner agency (Partner ID 1070802694).
• Google Ads API access approved by Google. Our access to the Google Ads API was reviewed and approved by the Google Ads API Compliance Team in April 2026.
• Two Google permissions only. The platform asks for the Google Ads scope and your Google account email address. It never asks for Gmail, Google Drive or Google Calendar.
• Google Limited Use. Our use of Google data follows the Google API Services User Data Policy, including the Limited Use requirements.

Hosting audited to SOC 2 Type 2

The platform runs on two providers that are audited every year by independent firms.

• Vercel hosts the application. Vercel holds a SOC 2 Type 2 attestation covering Security, Confidentiality and Availability. Vercel compliance
• Neon hosts the PostgreSQL database. Neon holds SOC 2 Type 2 and publishes a public SOC 3 summary in its Trust Center.

How your data is protected

• Encrypted in transit. Every connection to the platform and to the database uses TLS.
• Google authorization encrypted at rest. The token Google gives us is encrypted with AES-256-GCM before it is stored, and it is never displayed.
• Protected sign-in. Passwords are hashed with Argon2. Two-factor authentication is available, and repeated failed sign-ins are slowed down.
• Hardened pages. Security headers protect the sign-in screens against framing and injected scripts.

You stay in control of your account

• A person approves every change. The platform proposes a change, a negative keyword or a budget adjustment for example, and applies it only after approval. Each change is logged and its result is checked 30 days later.
• Spending cap. A monthly cap can be set per account. Campaigns are paused when it is reached.
• Disconnect at any time. In the platform, Settings, Google connections, Disconnect. We revoke the token at Google, delete it and stop every automated action on the account. You can also revoke access from your Google account.
• Deletion within 30 days. Write to contact@solerads.com and we delete the Google Ads data we hold for your accounts within 30 days.

Security testing

We test solerads.com and the platform for security issues. The latest test ran in September 2026 and the issues it found on sign-in and session handling have been fixed.

Report a vulnerability

If you find a security issue, write to nicolas@solerads.com. Our contact details are also published in security.txt.

Security questionnaires

Need a completed security questionnaire for your procurement process? Write to contact@solerads.com and we will send it back with the supporting documents. How we handle personal data is set out in the Privacy Policy and the Terms of Service.