Snapshot 13988

Document
Data processing addendum
URL
https://trust.mergify.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
97823 bytes
SHA-256 (raw)
3cac605b7ff5ce951e6cd236424513aa4e43687106bf37771f5f2d9fc3131390
SHA-256 (normalized text)
a735b1a0d91663778376a5ad066536a0b407502f1ed80ec8eafb32cb297842cb

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Mergify
Welcome to our comprehensive security and trust page, where we demonstrate our unwavering dedication to safeguarding your valuable data and maintaining the highest industry standards. At Mergify, we understand that trust is paramount in the world of SaaS software for developer tools. That's why we have implemented rigorous security measures, including continuous monitoring, thorough penetration testing, and compliance with SOC II standards. In this detailed overview, we provide transparency by sharing our compliance reports, offering insight into our security practices, and showcasing our commitment to protecting your information. Rest assured, we prioritize your trust and take your security seriously, allowing you to focus on what matters most: developing exceptional software.
security@mergify.com
Privacy PolicyOpens in new tab
Compliance
SOC 2 Type II
GDPR
Resources
View all
SOC 2 Type II 2025
Penetration Test 2026
DPA
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 18 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 11 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 34 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
Subprocessors
View all
Cloudflare
•
Infrastructure
101 Townsend St, San Francisco, CA 94107, United States
DNS, DDoS protection
Stripe
•
Payment service
185 Berry St Ste 55 San Francisco, CA, 94107-5705, United States
Datadog
•
Monitoring platform
New York Times Bldg, 620 8th Ave 45th Floor, New York, NY 10018, United States
Monitoring platform for metrics and logs
Google Cloud Platform
•
Infrastructure
1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States
Data storage provider
FAQ
View all