Last updated 26 October 2026
Outrun is a trading name of PRWN LTD, a company registered in England and Wales (company number 16554885).
Connections
Our website and app are served over HTTPS. We also tell browsers to use only HTTPS with us for the next two years (HSTS). We send browser security headers that stop our pages being framed by other sites and limit what the browser lets a page do.
Where your data is kept
Our database is hosted in London. Some of our other providers process data outside the UK. Who they are, where, and the legal safeguards we rely on are listed on our subprocessors page.
Payments
Card payments are taken by Stripe on Stripe’s own pages. We never see or store your full card number.
Signing in
You sign in with Google or with a one-time code we email you. There are no passwords to leak. We use a bot check on the sign-in form to cut down abuse.
Connections to your tools
The access tokens we hold for your CRM connections are stored encrypted.
If something goes wrong
If a personal data breach affects your data and poses a risk to you, we will tell you and, where the law requires, the Information Commissioner’s Office, without undue delay.
What we do not have
We do not hold SOC 2 or ISO 27001 certification, and we have not had an independent penetration test.
Found a security problem?
Email hello@outrun.so with “Security” in the subject. Tell us what you found and how to reproduce it. We read every report and will reply where we can. Please do not access other people’s data, and give us a reasonable time to fix a problem before you make it public.