Snapshot 13917
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Security at Appcues Security is built into the fabric of our products, team, infrastructure, and processes, so you can rest assured your data is safeguarded. security@appcues.com Privacy PolicyOpens in new tab Compliance SOC 2 Type 2 GDPR CCPA HIPAA Resources View all Reports 2026 Pentest Report 2026 September Pentest Summary of Findings (Attestation Letter) 2025 Appcues, Inc. SOC2 Type 2 2025 Pentest Report View 4 more Policies Appcues Security Testing Guidelines Appcues Business Associate Agreement Addendum Appcues Business Associate Agreement Form Assessments Appcues CAIQ (v4.0.2) CAIQ-Lite - 3.1 Appcues VSA - 2025 Documentation 25-26 Appcues Evidence of Insurance High Level Network Architecture Diagram Subprocessors View all Amazon Web Services • Primary infrastructure provider for Appcues applications and services USA & EU USA: Oregon, USA EU: Frankfurt, Germany ClickHouse • Provides managed database services. USA & EU Confluent • Infrastructure provider, managing Apache Kafka as a service. USA & EU Snowflake • Analytics database for calculating aggregate statistics for production. USA & EU FAQ View all Updates View all Security 2026 Pentest and Summary of Findings Documents Available Published June 4, 2026 Appcues’ 2026 Penetration Test Report is now available, as well as the summary of findings document. Roadmap EU hosting environment support for AI features Published February 11, 2026 AI features are now supported for any customers using the Appcues EU hosting environment. In addition, the Appcues' subprocessor list has been expanded to include OpenAI for EU and Langfuse for EU. Appcues complies with all applicable data protection laws, including GDPR. Roadmap EU Hosting Environment Published January 30, 2026 Appcues now offers an EU hosting environment. Customers using the EU hosting environment benefit from the same security controls, infrastructure standards, and subprocessors as our US hosting environment, with the following exceptions: OpenAI processing remains US-based. HIPAA support is not available in the EU hosting environment. All data in the EU hosting environment implements the same strict security controls as the US hosting environment, and Appcues complies with all applicable data protection laws, including GDPR. Compliance 2025 SOC 2 Type 2 Report Available Published December 26, 2025 Appcues’ 2025 SOC 2 Type 2 report covering the observation period 10/01/2024 to 09/30/2025 is now available on the trust center.