Welcome to GPS Insight's Trust Center. You will find information regarding GPS Insight's commitments to, and implementations of, security, privacy, compliance, transparency, and data protection.
GPS Insight maintains an Information Security and Privacy Program to ensure the protection of customers' data and operations when using GPS Insight products and services, while meeting the necessary regulatory, compliance, and contractual requirements.
Please reach out to us at trust@gpsinsight.com with any questions not answered here.
Trust Center Updates
GPS Insight’s Response to PHP2Shell Vulnerabilities
What Happened?
On October 21, 2026, PHP released security updates for two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619.
What Has GPS Insight Done to Address This?
GPS Insight received advance notice of these vulnerabilities and put network-level protections in place before they were made public.
GPS Insight’s security team immediately launched an investigation to assess our exposure across our products and infrastructure. Our investigation found no signs of compromise, and no customer data was affected. All impacted systems were patched on October 21, 2026.
As such, we consider the vulnerability fully mitigated within the GPS Insight environment.
Customer Impact
This vulnerability has not affected GPS Insight customers. We have found no customer data exposure, and no risk from these vulnerabilities remains.
GPS Insight's Response to React Server Component’s RCE Vulnerability (CVE-2025-55182)
In response to the recently disclosed React Server Components vulnerability, CVE-2025-55182, GPS Insight security conducted an investigation and confirmed that we are not impacted.