Media intelligence platform security for procurement teams
Before a monitoring tool goes on the approved vendor list, someone has to answer where the data comes from, what is stored, who can see it and what happens when the contract ends. This page answers those questions for MentionAlert in the order a security review usually asks them.
Public sources only, collected under platform terms
MentionAlert monitors public content on news sites, blogs, Reddit, X (Twitter), YouTube, forums, Hacker News, Q&A sites, Bluesky and review sites. Collection runs through official APIs and public feeds, within the terms each platform sets for that access.
- No private groups, direct messages or closed communities.
- No content that sits behind a login.
- No scraping of sites whose terms forbid it.
- Every mention keeps a link to the public page where it was published, so anyone on your team can verify the original.
For a legal or compliance reviewer this means MentionAlert holds copies of material that was already public, attached to the keywords your team chose to track.
Public trust discussions your security team sees first
| Source | Mention | Sentiment |
|---|---|---|
| Forum | ForumA forum thread asks whether your product is safe for company dataNeutral | Neutral |
| RedditA user asks if your login supports single sign onNeutral | Neutral | |
| X | XA post claims a phishing page copies your login screenNegative | Negative |
| Q&A site | Q&A siteAn admin explains how they configured roles in your productPositive | Positive |
Illustrative sample, not your data.
What data the media intelligence platform stores
MentionAlert keeps only what the product needs to run your monitoring.
| Data | What it is | Why it is stored |
|---|---|---|
| Account data | Work email, hashed password, seat and role assignments | Sign in and access control |
| Keywords and filters | Brands, tracked keywords, include and exclude words, language, country and source settings | Deciding which public mentions to collect |
| Mentions | Text snippet, source, link, publication date, sentiment score and reach when the source provides it | Feed, alerts, search and reports |
| Alert settings | Email recipients, Slack channels, webhook endpoints, Microsoft Teams channels on Enterprise | Delivering alerts to the right place |
| Reports | Generated weekly summaries, PDF reports and client reports | History and redistribution |
| Billing records | Plan, billing period and invoices | Running the subscription |
Payment card numbers are handled by the payment processor at checkout and are not stored by MentionAlert.
Encryption in transit and at rest
All traffic to and from MentionAlert uses TLS, including the app, the API and webhook deliveries. Stored data, including mentions, keywords and reports, is encrypted at rest. Passwords are stored as one way hashes, and new accounts confirm their email address with a one time code before first use. The service is hosted with a professional hosting provider.
01Roles per workspace
Access is organised by workspace. On Agency and Enterprise, roles are set per workspace, so a person can manage keywords and alerts in one brand and only read mentions in another, or see no other workspace at all. Agencies use this to give a client contact access to that client's workspace and nothing else.
02Single sign on with SAML
Enterprise supports SSO through SAML, so staff sign in with the identity provider your company already runs. Joiners and leavers are handled where you already manage them, and password policies follow your own rules.
03Audit log
Enterprise includes an audit log that records changes to keywords, filters, alert routing, members, roles and settings, with the person and the time of each change. It gives a reviewer a clear trail when a keyword or an alert destination changes.
99.9 percent uptime SLA on Enterprise
Enterprise comes with a 99.9 percent uptime SLA for the app and alert delivery, plus priority delivery for alerts. Starter, Team and Agency run on the same infrastructure without a contractual uptime commitment.
Data retention by plan
Mention history is kept for a fixed window per plan and then drops out on a rolling basis.
| Plan | Mention history |
|---|---|
| Starter | 30 days |
| Team | 12 months |
| Agency | 24 months |
| Enterprise | 36 months |
Keywords, filters, alert settings and reports stay in place while the account is active.
01Deletion on request and at account closure
You can delete individual mentions, keywords or whole workspaces at any time from the account. Deleting mentions does not change the mention quota already counted for the billing period. When an account is closed, its workspaces, keywords, mentions and reports are deleted. You can also ask for deletion of specific data by writing to [email protected] from the account owner's address.
Built for procurement and finance
- Every plan, Enterprise included, has a published price and starts self serve with the same button.
- Enterprise can be paid by invoice as well as by card.
- Prices are in US dollars, with taxes added where applicable.
- Payments are final, as described in the refund policy, and you can cancel any time with access to the end of the paid period.
- Plan limits, including seats, keywords and mentions per month, are listed in full on the media monitoring tools page.
01Why decision makers pick a self serve platform
A single subscription replaces manual searching across news, social and review sites, and puts every alert, report and export in one place that IT can review. The feature list by plan is on the media tracking software page, and recurring report formats are described under media monitoring reports.
02Security contact
Send security questions, review questionnaires and vulnerability reports to [email protected]. Please include the account email if the question concerns a specific workspace.
No. Only public content is collected, through official APIs and public feeds under each platform's terms. Private groups, direct messages and login-only pages are never collected.
Enterprise. It includes SSO with SAML, roles per workspace, the audit log, a 99.9 percent uptime SLA and invoice billing.
Your plan runs to the end of the paid period. When the account is then closed, its workspaces, keywords, mentions and reports are deleted.