Vendor security profiles

SOC 2, ISO 27001, AI-training policies, subprocessors and DPAs for 199 software vendors, taken from each vendor's own public pages, with links to the source. Free, re-checked every two weeks.

Check any vendor

Using an AI agent? Connect Stormap's free MCP server and ask it to review vendors for you: setup for Claude, Cursor and ChatGPT.

Jump to: AI · CRM & support · Communication · Developer & data · HR & finance · Marketing & web · Productivity · Security & IT

AI

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
Anthropic	100	SOC 2	See quote	–
Cohere	95	SOC 2 Type II	See quotes	25
Copy.ai	55	SOC 2	Not found	–
Cursor	75	SOC 2	Not found	–
Descript	70	SOC 2 Type II	Not found	–
ElevenLabs	85	SOC 2 Type II	Not found	–
Glean	70	SOC 2 Type II	Not found	21
Harvey	100	SOC 2 Type II	See quotes	14
Hugging Face	50	–	Not found	–
Jasper	70	SOC 2	Not found	31
Mistral AI	70	–	See quote	–
n8n	65	–	Not found	19
Pinecone	80	SOC 2 Type II	Not found	56
Replit	80	SOC 2 Type II	Not found	49
Runway	80	SOC 2 Type II	Not found	30
Scale AI	100	–	See quote	–
Sourcegraph	80	SOC 2 Type II	Not found	–
Synthesia	80	SOC 2 Type II	Not found	–
Tabnine	65	SOC 2 Type II	Not found	–
Tome	0	–	Not found	–
Writer	95	SOC 2 Type II	See quotes	20
Zapier	95	SOC 2 Type II	See quote	37

CRM & support

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
Apollo.io	70	SOC 2 Type II	See quotes	–
Attio	45	–	Not found	–
Chili Piper	55	SOC 2 Type II	Not found	–
Clay	70	SOC 2	Not found	–
Close	55	SOC 2 Type II	Not found	–
Drift	80	SOC 2 Type II	Not found	–
Gorgias	85	SOC 2 Type II	Not found	4
Help Scout	95	SOC 2 Type II	Says no	20
HubSpot	85	SOC 2 Type II	Providers: no	–
Intercom	90	SOC 2 Type II	See quotes	13
Kustomer	80	–	Not found	–
Outreach	80	SOC 2 Type II	Not found	32
Pipedrive	95	SOC 2 Type II	See quotes	11
Salesforce	60	–	See quote	–
Salesloft	80	SOC 2 Type II	Not found	–
Zendesk	100	SOC 2 Type II	See quotes	62
ZoomInfo	80	SOC 2 Type II	Not found	36

Communication

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
Aircall	80	SOC 2 Type II	Not found	27
Braze	65	–	Not found	–
Customer.io	70	SOC 2 Type II	Not found	9
Dialpad	75	SOC 2 Type II	Not found	–
Discord	40	–	Not found	–
Front	75	SOC 2 Type II	Not found	5
Gong	95	SOC 2 Type II	See quotes	9
Klaviyo	80	SOC 2 Type II	Not found	35
Mailchimp	90	–	See quote	25
Postmark	65	SOC 2 Type II	Not found	–
RingCentral	70	SOC 2 Type II	Not found	80
SendGrid	70	SOC 2	Not found	33
Slack	85	SOC 2	See quotes	–
Superhuman	95	SOC 2 Type II	See quote	14
Twilio	70	SOC 2	Not found	33
Vonage	40	–	Not found	–
Zoom	60	–	Providers: no	–

Developer & data

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
Airbyte	80	SOC 2	Says no	–
Algolia	80	SOC 2	Not found	23
Amplitude	100	SOC 2 Type II	See quotes	17
Auth0	40	–	Not found	–
CircleCI	75	SOC 2	Says no	–
Clerk	85	SOC 2 Type II	Not found	3
Cloudflare	90	SOC 2 Type II	See quotes	9
Confluent	70	SOC 2 Type II	Not found	–
Databricks	100	–	See quote	35
Datadog	80	SOC 2 Type II	Not found	28
dbt Labs	80	–	See quotes	–
DigitalOcean	85	SOC 2 Type II	Not found	3
Fastly	55	SOC 2 Type II	Not found	–
Fivetran	65	SOC 2	Not found	–
Fly.io	80	SOC 2 Type II	Not found	33
FullStory	65	–	Not found	8
GitHub	65	–	Not found	30
GitLab	80	SOC 2	Not found	62
Grafana Labs	80	–	Not found	2
Heap	70	SOC 2	Not found	–
Heroku	65	SOC 2 Type II	Not found	–
Hex	85	SOC 2 Type II	Not found	14
Hotjar	85	SOC 2 Type II	Not found	45
incident.io	85	SOC 2 Type II	Not found	20
JFrog	100	–	See quote	16
LaunchDarkly	80	SOC 2 Type II	Not found	–
Looker	60	–	Not found	–
Metabase	55	SOC 2 Type II	Not found	–
Mixpanel	85	SOC 2 Type II	Not found	13
MongoDB	60	–	Not found	28
Neon	70	SOC 2 Type II	Not found	35
Netlify	95	SOC 2 Type II	Says no	25
New Relic	85	–	Not found	14
PagerDuty	80	SOC 2 Type II	Not found	49
PlanetScale	70	SOC 2 Type II	Not found	19
PostHog	90	SOC 2 Type II	See quotes	–
Postman	90	SOC 2 Type II	Says no	–
Railway	80	SOC 2 Type II	Not found	45
Render	70	SOC 2 Type II	Not found	–
Retool	100	–	Says no	11
RudderStack	80	SOC 2 Type II	Providers: no	–
Sanity	85	SOC 2 Type II	Not found	12
Segment	70	SOC 2	Not found	33
Sentry	85	SOC 2 Type II	Not found	–
Snowflake	85	SOC 2 Type II	Not found	80
Snyk	65	–	Not found	45
Sonar	70	SOC 2	Not found	3
Supabase	85	SOC 2 Type II	Not found	–
Vercel	85	SOC 2 Type II	See quotes	–

HR & finance

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
Adyen	60	SOC 2 Type II	Not found	–
Ashby	35	–	Not found	–
BambooHR	65	SOC 2 Type II	Not found	–
BILL	55	SOC 2 Type II	Not found	–
Brex	80	SOC 2	Says no	–
Carta	75	–	Providers: no	52
Chargebee	35	–	Not found	–
Culture Amp	95	–	Providers: no	34
Deel	70	SOC 2	Not found	–
Expensify	35	–	Not found	–
Greenhouse	100	SOC 2 Type II	See quotes	–
Justworks	40	–	Not found	–
Lattice	95	SOC 2	Says no	39
Lever	80	SOC 2 Type II	Not found	57
Mercury	55	SOC 2 Type II	Not found	–
Navan	65	–	Not found	–
Paddle	70	SOC 2	Not found	–
Plaid	60	–	Not found	–
QuickBooks	20	–	Not found	–
Ramp	50	SOC 2 Type II	Not found	–
Remote	80	SOC 2 Type II	See quote	–
Rippling	55	SOC 2 Type II	Not found	–
Stripe	70	SOC 2 Type II	Not found	–
Workday	60	–	Says no	–
Xero	55	SOC 2	Not found	–

Marketing & web

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
ActiveCampaign	80	SOC 2 Type II	Not found	14
Ahrefs	55	–	See quote	–
beehiiv	65	SOC 2 Type II	Not found	–
BigCommerce	65	SOC 2	Not found	–
Buffer	35	–	Not found	–
Hootsuite	95	SOC 2 Type II	Says no	20
Kit	65	SOC 2 Type II	Not found	–
Optimizely	80	SOC 2 Type II	Not found	1
Semrush	10	–	Not found	–
Shopify	85	SOC 2 Type II	Not found	34
Similarweb	45	SOC 2 Type II	Not found	–
Sprout Social	60	–	Not found	22
Squarespace	70	–	Not found	–
Unbounce	80	SOC 2 Type I	Not found	–
Vimeo	100	SOC 2 Type II	See quote	15
Webflow	80	SOC 2 Type II	Not found	12
Wistia	65	SOC 2 Type II	Not found	–
Wix	45	SOC 2 Type II	Not found	–
WordPress.com	60	–	Not found	–
Yotpo	85	–	Not found	30

Productivity

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
Airtable	80	SOC 2	Not found	26
Asana	100	SOC 2 Type II	Says no	46
Atlassian	90	SOC 2	See quotes	53
Basecamp	95	SOC 2 Type II	Says no	9
Box	55	–	Not found	–
Calendly	100	SOC 2 Type II	See quotes	21
ClickUp	100	SOC 2 Type II	See quotes	53
Coda	40	–	Not found	–
DocuSign	85	SOC 2 Type II	Says no	–
Dropbox	60	SOC 2	Not found	–
Evernote	80	–	Says no	–
Figma	100	SOC 2 Type II	See quotes	58
Fireflies.ai	85	SOC 2 Type II	Says no	–
Grammarly	75	SOC 2 Type II	See quotes	–
Jotform	85	SOC 2	Not found	6
Linear	85	SOC 2 Type II	See quotes	–
Loom	100	SOC 2	See quote	38
Lucid	35	–	Not found	–
Miro	65	SOC 2 Type II	Not found	–
monday.com	95	SOC 2 Type II	Says no	30
Notion	80	SOC 2 Type II	Providers: no	–
Otter.ai	95	SOC 2 Type II	See quote	17
PandaDoc	10	–	Not found	–
Smartsheet	100	SOC 2	See quote	59
SurveyMonkey	95	SOC 2	See quote	24
Todoist	60	SOC 2 Type II	Not found	–
Trello	85	SOC 2 Type II	See quote	–
Typeform	65	SOC 2	Not found	–
Wrike	100	SOC 2 Type II	See quotes	37

Security & IT

Vendor	Score	SOC 2	Trains AI on your data?	Subprocessors
1Password	70	–	Not found	–
Abnormal Security	55	–	Not found	14
Bitwarden	70	SOC 2 Type II	Not found	20
CrowdStrike	30	–	Not found	–
Drata	80	SOC 2	See quotes	–
Duo	60	SOC 2	Not found	–
Jamf	85	–	Not found	46
JumpCloud	65	SOC 2	Not found	–
Kandji	55	SOC 2 Type I	Not found	–
KnowBe4	55	–	Not found	–
LastPass	80	SOC 2 Type II	Says no	–
Okta	60	SOC 2	Not found	–
Proofpoint	55	–	Not found	–
Secureframe	80	SOC 2 Type II	Not found	19
SentinelOne	60	–	Not found	–
Tailscale	100	SOC 2	Says no	10
Tines	100	–	Providers: no	9
Vanta	100	SOC 2	Providers: no	–
Wiz	70	SOC 2 Type II	Not found	–
Zscaler	40	–	Not found	6

Facts are what each vendor publishes about itself. Certifications are claims, not verified audit reports. Stormap is not affiliated with these vendors. The score measures how much of a security review can be answered from public pages, not how secure a vendor is.