Snapshot 13998

Document
Trust center
URL
https://trust.groq.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
104310 bytes
SHA-256 (raw)
ccfd43ef0e2d0cfb35b23dee9956c1e74d27b6b45f4429fe0e944ff4ed9e7965
SHA-256 (normalized text)
db182c2b058595f83948917d66ea82ec6c3830739d7a6914f6b36ed6ff75780a

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Security at Groq
Groq is dedicated to protecting your data and takes information security extremely seriously. We recognize that trust must be earned and maintained, which is why we're dedicated to upholding the highest standards of security and compliance.
security@groq.com
Privacy PolicyOpens in new tab
We are pleased to announce that we have successfully maintained our SOC 2 Type II compliance, with our latest report now available as of 2025. This ongoing certification demonstrates our continued commitment to upholding the highest industry standards for security. We appreciate the rigorous review by our independent auditors and are proud to reaffirm that our security practices remain robust and aligned with the trust our customers place in us.
Compliance
SOC 2 Type II
GDPR
HIPAA
Resources
View all
SOC 2 Type II - 2025
SOC 2 Type II - 2024
Groq - 2026 SOC 2 Bridge Letter
Controls
Updated about 1 hour ago
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 17 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Anti-malware technology utilized
View 11 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Cybersecurity insurance maintained
Configuration management system established
Change management procedures enforced
View 31 more Internal security procedures controls
Data and privacy
Customer data deleted upon leaving
Data classification policy established
Data collected
Customer personally identifiable information
Employee personally identifiable information
Credit card information
Personal health information
Subprocessors
View all
Stytch
•
Identity intermediary
San Francisco, CA
Provides datastore for identity records and attributes
Google Cloud Platform
•
Cloud provider
Mountain View, CA
Cloud Computing
Stripe
•
Payment processing
California, Oregon
Stripe is a payment processing company that handles sensitive customer data, including credit card information, bank account numbers, and other personal and financial information.
CloudFlare
•
Cloud Connectivity
Provides web application firewall (WAF) and content delivery network (CDN) services
Updates
View all
General
Subprocessor List Updated
Published November 26, 2025
Groq recently updated our subprocessor list in November 2025.
General
Subprocessor List Updated
Published September 5, 2025
Groq recently updated our subprocessor list in September 2025.
General
Subprocessor List Updated
Published August 4, 2025
Groq recently updated our subprocessor list in August 2025.
General
Subprocessor List Updated
Published May 13, 2025
Groq recently updated our subprocessor list in May 2025.