Snapshot 1195
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Overview Welcome to the Pipedrive Trust Center. This is your central hub for detailed information and resources regarding how we protect your data, uphold your privacy, and maintain the security and reliability of our services. In the digital world, trust is earned through transparency and action. We are committed to building and maintaining that trust by ensuring our security measures and privacy practices not only meet but exceed industry standards. Please explore this site as information is being added and updated regularly. There is a free search option at the top of the page to quickly locate information that you're interested in. Compliance GDPR EU-US DPF UK Extension to EU-US DPF ISO/IEC 27001 SoA ISO/IEC 27001:2022 ISO/IEC 27701 SOC 2 Type 2 SOC 3 DORA EU Data Act Documents COMPLIANCEISO/IEC 27001 SoA COMPLIANCEISO/IEC 27001:2022 COMPLIANCEISO/IEC 27701 COMPLIANCESOC 2 Type 2 COMPLIANCESOC 3 APP SECURITYApplication Penetration Testing APP SECURITYResponsible Disclosure LEGALCertificate of Insurance ESG & DEBIAnti-Modern Slavery ESG & DEBICode of Ethics ESG & DEBISupplier Code of Conduct BC/DRBusiness Continuity Plan (BCP) Product Security Data Security Audit Logging Multi-Factor Authentication View more Data Security Access Monitoring Secret Management Data Backups View more App Security Responsible Disclosure Software Development Lifecycle Secure Development Training View more Artificial Intelligence AI and Client Data AI-Powered Features AI Sub-Processors View more ESG & DEBI Anti-Bribery and Corruption Anti-Competitive Practices Anti-Modern Slavery View more Legal Subprocessors Certificate of Insurance Data Processing Agreement View more Data Privacy Cookies Data Breach Notifications Data Protection Officer View more Access Control Data Access User Access Review Internal Single-Sign-On (SSO) View more Infrastructure Amazon Web Services Cloud Workload Protection Capacity Planning & Management View more Endpoint Security Endpoint Detection & Response Disk Encryption DNS Filtering View more Network Security Distributed Denial of Service Protection (Anti-DDoS) Bot Detection Data Loss Prevention View more Corporate Security Employee Training Insider Threat Program Incident Response View more Security Grades SecurityScorecard Overall Score Incident Response Incident Response Program Overview Designated Response Personnel Incident Reporting Process View more Risk Management Risk Management Program Risk Assessments Third-Party Dependence Asset Management Asset Inventories (Hardware/Software) Secure Asset Disposal IT Asset Management (ITAM) Program BC/DR Business Continuity Plan (BCP) Disaster Recovery Plan (DRP) Data Backup/Backup Protection View more Training Security Awareness Training Employee Privacy Training Role-Based Training View more Change Management Change Management Program Configuration Management Program System Hardening & Secure Baseline View more Physical & Environment Data Center & Cloud Physical Security Remote Telework Visitor Control Continuous Monitoring Automated Alert Response Event & Audit Log Management Security Information & Event Management (SIEM) Knowledge Base (FAQ) Where is my data processed when using AI features? How is Pipedrive aligned with the EU AI Act? Do I need consent to record meetings with Nova? How does Pipedrive ensure AI feature's security? How do I know which features are AI powered? View more Trust Center Updates New / Updated Documents General 2026 Penetration Testing Report is now available for download. Access to the request link is here: https://trustcenter.pipedrive.com/?itemUid=b143d369-02e5-440f-9c9b-71f4a4634c45&source=click Legal Compliance Updates to sub-processor list On July 13, 2026 we made some updates to our sub-processor list. What’s changing? We have added Zight, Inc. as a sub-processor: Zight is used to enable screenshot, screen recording, video, audio and attachment sharing in customer support communications for troubleshooting and support purposes. You can view the updated sub-processors list here. Updated Privacy Notice, Data Processing Addendum and Terms of Service We've recently updated our Privacy Notice and Data Processing Addendum (DPA) to provide greater transparency and clarity regarding our data practices. We have also made minor updates to our Terms of Service to improve clarity and consistency. We encourage you to review the full documents, but here is a summary of the key changes: Privacy Notice The updated Privacy Notice is available here. Gmail Data Use: We added that Gmail data accessed through email sync may also be used to enhance the email experience for productivity purposes, including AI-powered features such as email summaries, meeting preparation, and contextual recommendations, when you choose to enable or interact with those features within the Pipedrive Services. Clarified Data Processing: We clarified the circumstances under which we may access Client Data in connection with providing and maintaining our Services. Data Processing Addendum The updated DPA is available here Expanded Legal Coverage: We broadened the data protection laws and international transfer safeguards referenced in the DPA to reflect additional jurisdictions. Clearer Processing Purpose: We provided more detail on the purposes for which Personal Data is processed and the activities this covers. Clearer Consent Expectations: We clarified that Client's responsibility for obtaining necessary consents and authorizations specifically extends to meeting recordings and AI-powered features, in addition to marketing purposes. Defined Terms Refined: We refined certain defined terms for improved clarity and consistency. Terms of Service The updated Terms of Service are available here. Clarifications for Readability: We made minor wording updates throughout the Terms of Service to improve clarity and consistency. These changes do not alter your rights or obligations under the Terms. Your continued use of the Pipedrive Services after the updated Privacy Notice, DPA, and Terms of Service take effect means you have read, understood and agreed to the current versions. Questions? Contact our Privacy team at privacy@pipedrive.com. Updates to sub-processor list On June 25, 2026 we made some updates to our sub-processor list. What’s changing? The sub-processor list has been reorganized into clearer categories: Hosting and Infrastructure, Feature-specific, AI, and Customer Support. Formatting and clarification updates to improve readability. Addition of new sub-processors: Amazon Web Services, Inc.: artificial intelligence features and functionality. Anthropic, PBC: artificial intelligence features and functionality. Hyperdoc Inc. (d/b/a Recall.ai): AI meeting intelligence features and functionality. You can view the updated list of sub-processors here. Updates to sub-processor list We have made updates to our sub-processor list. What’s changing? Growster SAS (Surfe): Surfe is a new service provider for our data enrichment feature and will replace Rightbound Inc. as of March 9. The data enriched by Rightbound via the data enrichment feature will stay on your account. You can view the updated list of sub-processors here. Updated Privacy Notice January 5, 2026 We've updated our Privacy Notice to provide greater transparency and clarity. The updated Privacy Notice is available here. We encourage you to review the full Privacy Notice, but here is a summary of the key changes: AI Transparency: We added a new section explaining how Pipedrive uses artificial intelligence and machine learning. Expanded Rights Information: We've provided clearer guidance on your privacy rights, including more detailed information about opting out. Additional Data Sources: We now more clearly describe information we may receive from other sources, including commercial data enrichment services. Language Alignment: We've updated terminology throughout the Privacy Notice to align with our Terms of Service and for improved clarity. Your continued use of the Pipedrive Services after the updated Privacy Notice takes effect means you have read, understood and agreed to the current version. Questions? Contact our Privacy team at privacy@pipedrive.com. Updates to sub-processor list We have made updates to our sub-processor list: Pipedrive will add Atlassian PTY Ltd. (LOOM) as a new sub-processor. Atlassian PTY Ltd. (LOOM): Loom is used to enable image, video or attachment sharing in customer support communications, and will be processing images and videos submitted by Clients for troubleshooting and support purposes. You can view the updated list of sub-processors here. Updates to sub-processor list We’ve made updates to our sub-processor list. What’s changing? Tet SIA. Tet SIA is supporting hosting services for the Campaigns Feature and is added to the list. APIHub, Inc. (Clearbit). APIHub, Inc has been removed because it was the third-party service provider for the Smart Contact Data feature, which has now been sunset. It has been replaced with Rightbound, a service provider for the Data Enrichment feature. Bird (previously MessageBird). The company has changed their trading name, although the name of the legal entity has remained the same. The company’s new name has been reflected in our records. You can view the updated list of sub-processors here. Updated Data Processing Addendum We’ve updated our Data Processing Addendum (DPA). The key changes include: The DPA is now incorporated directly into our Terms of Service, eliminating the need for separate signatures We’ve added references to Brazilian Standard Contractual Clauses (SCCs) for enhanced compliance We’ve unified terminology throughout the document to align with our Terms of Service We’ve conducted a general review and update of the document for clarity and accuracy You can find the latest version of our DPA at Pipedrive Data Processing Addendum.