Snapshot 103112
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Contact Sales Get Grammarly Pro Trusted by teams at Security is embedded in our culture Maintaining a secure company, product, and infrastructure is top of mind at Grammarly across teams and departments. Our rigorous security policies and procedures are woven into how we operate as an organization with integrity and ethics. Dedicated security team Grammarly’s in-house team of security specialists is focused on ensuring security across the company—in our product and infrastructure, as well as in all operations. The team also oversees risk management and standards compliance. Company executives are directly involved in overseeing security strategy. Internal training and monitoring Grammarly employees complete mandatory annual training on a wide range of privacy and security topics. In addition, our Security Champions program ensures that teams have an embedded security-focused adviser who drives team-specific security initiatives. Access management Grammarly adheres to the principle of least privilege—employees’ data access rights are regularly reviewed to ensure only minimum required privileges are granted. All workstations run on centrally controlled endpoint-management software that enforces security configurations and protection solutions. Enterprise-grade attestation and regulatory compliance SOC 2 (Type 2) Grammarly’s SOC 2 (Type 2) report validates our controls based on the security, privacy, availability, and confidentiality trust services criteria. Contact us to read our report. ISO/IEC 27001:2022 Grammarly’s information security management system meets the requirements of ISO 27001 and 27002 international standards. Read our certificate. ISO/IEC 27018:2019 Grammarly meets the requirements of ISO 27018 regarding our protection of personally identifiable information (PII) in the cloud. Read our certificate. ISO/IEC 42001:2023 Grammarly meets the requirements of ISO 42001 ensuring responsible AI development and use. Read our certificate. SOC 3 Grammarly’s SOC 3 report describes our validated controls regarding security, privacy, availability, and confidentiality. Read our public report. ISO/IEC 27017:2015 Grammarly’s information security practices meet the requirements of ISO 27017 regarding our provision and use of cloud services. Read our certificate. ISO/IEC 27701:2019 Grammarly's privacy information management system meets the requirements of ISO 27701 international standards. Read our certificate. Protecting your data and privacy Trust Grammarly to protect your writing with care—we maintain security standards and procedures to keep your words safe. Read our Trust Center to learn about our user-first approach to privacy and security. Data security Through industry-standard data protection, secure infrastructure, and third-party verification, Grammarly ensures data security across our product ecosystem. Data ownership Your words are yours— we do not sell or monetize your or your team’s content. We make money when you purchase our paid products. Features that enhance security and control Grammarly gives you control over how your employees use the product so you can better protect your company's work. Team administration Administration tools make it easy to add, remove, or transfer accounts and to manage team member roles, permissions, and access within your company. SAML single sign-on SSO allows for access management and enforcement of company-specific controls through integrations with identity providers. Two-step authentication For an extra layer of safety, multi-factor authentication is available for team members across your company to secure their individual access. Custom security controls Use your own security key, and choose how long employees can stay logged in before needing to reauthenticate. Secure infrastructure Grammarly’s infrastructure is built to protect your data according to high industry standards. Data hosting Grammarly hosts data in Amazon Web Services data centers in the US East region and ensures continual product availability by using native backup tools. An industry-leading infrastructure provider, AWS is certified as compliant with ISO 27001 and has received a SOC 2 (Type 2) report. Data encryption Grammarly encrypts all data in transit and at rest. Data transfer is protected using the industry-standard TLS 1.2 protocol, while data at rest in AWS is encrypted using AES-256 server-side encryption. Grammarly uses AWS Key Management Services for database encryption and secure key management. Enterprise clients can either provide their own encryption keys or use a Grammarly-managed key to control and view access to data stored at rest in Grammarly’s service. Cloud platform All components that process your data operate in Grammarly’s private network inside our secure cloud platform, and each user’s data is isolated from other users’ data. Grammarly’s servers and network ports are behind load balancers and a web application firewall. Grammarly maintains a thorough vendor-review process which includes multi-step security and privacy assessments. Third-party validation External penetration testing Grammarly continually works to identify and fix security vulnerabilities in our product and infrastructure. That’s why we undergo third-party network penetration tests as well as AWS security and corporate infrastructure security assessments and audits. Bug bounty program Grammarly’s ongoing HackerOne bug bounty program promotes transparency and provides a channel for external security researchers to identify potential security concerns. Our team responds rapidly—and resolves these issues before they can be exploited. If you believe you’ve discovered a security-related issue, please report it at HackerOne or contact us at security@grammarly.com. Read more about Grammarly security Blog Post Advancing Grammarly’s Vision to Fuel Effective Communication Across the Enterprise Company Grammarly Champions a User-First Approach to Protecting Data Security and Privacy Blog Post Security Keys at Grammarly Part 1: Why We Moved From OTP to FIDO2 for Team Member Authentication Write with more peace of mind Join over 40 million people and 50,000 organizations who trust Grammarly to help them communicate with confidence. Sign up