Testimonial software security for teams that publish customer words
Testimonials carry customer names, faces, voices and opinions, and they end up on your most visible pages. That puts them in front of legal, security and brand review at the same time. This page explains how TestimonialManager controls who publishes what, how customer data is stored and what you can export or delete, so the person signing off on the tool has the facts in one place.
Roles and approvals so nothing goes live without review
Nothing a customer sends appears on your website by itself. Every testimonial, every AI highlight and every edited transcript waits in the library until a team member with publishing rights approves it.
- Owner: billing, plan, team members and every setting
- Admin: brands, request pages, consent wording, integrations
- Editor: tags, highlights, transcript corrections, widget layouts
- Approver: the only role besides Owner and Admin that can publish a testimonial
- Viewer: read access to the library and reports
Roles apply per brand, so an agency can give a client team approval rights for their own brand and nothing else. Team seats are 1 on Starter, 5 on Growth, 15 on Scale and 50 on Enterprise.
SSO with SAML and a full audit log on Enterprise
Enterprise connects to your identity provider through SAML single sign on. Your team signs in with company credentials, and removing someone from your directory removes their access.
The audit log on Enterprise records who did what and when: sign ins, role changes, consent wording edits, approvals, unpublishing, exports and deletions. Security teams filter it by user, brand and date and export it for their own records.
Consent records that hold up to review
Each testimonial sent through your request form carries a consent record: the wording the customer accepted, the options they chose for name and photo, date and time, and the IP address of the submission. The customer has a withdraw link, and a withdrawal removes the quote from every embed. How it works is described on the testimonial consent form page.
Encryption, hosting and the providers we use
Customer data, testimonials, recordings and consent records are encrypted in transit and at rest. The service runs on infrastructure from a professional hosting provider, with access limited to the people who operate it.
We work with a small set of processors, listed here by category:
- Hosting provider for the application, database and stored recordings
- Email delivery provider for request emails and confirmations
- SMS delivery provider for text message requests
- Payment processor for subscriptions
- AI model provider for highlights and transcripts, used only on testimonials in your own library
Customer data is not sold and is not used to train AI models for other businesses. How the AI step works is explained on ai testimonial highlights.
Your data stays yours, export anytime and delete on request
The library belongs to you. On every plan you can export testimonials, transcripts, tags and the consent log as CSV files, and download original video recordings. Leaving the service never means losing your proof.
Deletion works at every level. A single testimonial can be deleted from the library, and a full workspace can be deleted on request by writing to [email protected] from the account owner's email. Deleted data is removed from the live system, and backups roll off on their regular schedule. Deleting testimonials does not restore usage limits for the current billing period.
SLA, invoice billing and DPA
Larger companies usually need three documents before a purchase goes through, and the plans cover them as follows.
- DPA: a data processing agreement is available from Scale (499 USD per month, or 249 USD per month billed yearly at 2,988 USD per year)
- SLA: Enterprise includes a 99.9 percent uptime commitment
- Invoice billing: Enterprise billed yearly (749 USD per month, 8,988 USD per year) can pay by invoice instead of card
- SSO with SAML and the audit log are part of Enterprise (1,499 USD per month, or 749 USD per month billed yearly)
Starter costs 49 USD per month or 24 USD per month billed yearly, Growth 149 USD per month or 74 USD per month billed yearly. Every plan starts with Get started and the same signup, with no sales call. The full table is on testimonial software pricing.
Google reviews and imported content
Google reviews imported through google review management are public content, labeled with their source and never presented as first party testimonials. Your request flow always offers the Google review link to every customer who wants to leave one, which keeps your process within Google's review policies. Private feedback is an extra option, never a filter on who gets the link.
FAQ
Can a testimonial be published without approval?
No. Testimonials, AI highlights and edited transcripts all wait for a team member with publishing rights. Roles are set per brand.
Which plan includes SSO and the audit log?
Enterprise, at 1,499 USD per month or 749 USD per month billed yearly. It also includes the 99.9 percent SLA and invoice billing on yearly terms.
Do you sign a data processing agreement?
Yes. A DPA is available from the Scale plan upward.
Can we export everything and leave?
Yes. Testimonials, transcripts, tags, video files and the consent log export at any time on every plan, and a workspace can be deleted on request.
Who can I ask about security questions?
Write to [email protected]. Signed in customers can also reach the team from inside the account.
Put customer proof on your site with controls your legal team expects
Set up roles, approvals and consent from the first day and keep a record of every quote you publish.