Snapshot 147429
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Announcements Security Vulnerability Reporting Published on May 18, 2026 If you believe you have found a security vulnerability in any of Sendbird's products or services, we encourage you to report it to us responsibly. Please submit your findings by email to security@sendbird.com with a description of the issue, steps to reproduce, and any relevant details that may help our team investigate. We take all reports seriously and will work to address confirmed vulnerabilities promptly. Please note that submission of a report does not guarantee eligibility for any reward or bounty. Thank you for helping keep Sendbird and our users secure. Compliance Documentation of our compliance against global standards including certifications, attestations, and audit reports. Security Policies Continuous monitoring App Security Annual Penetration Test Disclosure Process for Customers Employee Disclosure Process Quarterly Vulnerability Scan Software Development Life Cycle Policy Vulnerability Management Web Application Firewall Data Security Daily Database Backups Encryption at Rest SSL/TLS Enforced System Access Control Policy Infrastructure Security Encryption of Web-Based Admin Access Multiple Availability Zones Password Policy Network Security Clean Desk Policy in Place Cloud Infrastructure Linked to Drata Organization Security BCP/DR Tests Conducted Annually Disaster Recovery Plan Incident Response Plan Incident Response Team Product Security Annual Performance Evaluations Backup Policy Commitments Explained to Customers Credential Keys Managed Cryptography Policies Customer Data Deletion Upon Termination Customer Data Policies Data Classification Subprocessors Sendbird uses certain sub-processors to assist in providing its services. Subprocessors URL Cerebras Systems, Inc. Cloud-based AI inference infrastructure to support Sendbird's AI agent features Data location: United States and European Union Baseten AI inference platform used to run open-source and custom language models that power Sendbird's AI Agent product Data location: United States Alta.AI Internal AI sales engagement tool for inbound and outbound activities, integrated with CRM systems (e.g., Salesforce) Data location: United States Vercel Hosting platform used to operate internal developer tooling and productivity workflows Data location: United States Supabase Backend infrastructure used to support internal operational tooling and analytics workflows Data location: United States (cross-border transfer of non-US data restricted pe... AssemblyAI Speech-to-text processing service used to support Sendbird's Voice AI Agent functionality Data location: US / EU (per plan) Topics and common questions 4 Yes, Sendbird has self-certified its compliance with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”), and the UK Extension to the EU-U.S. DPF (“UK Extension”), collectively (the “DPF”). For more information please see: https://sendbird.com/dpf Yes, Sendbird conducts regular penetration tests performed by independent third-party security firms. These assessments help us proactively identify and remediate potential vulnerabilities across our products and infrastructure. Please email security@sendbird.com All communication to and from Sendbird servers is encrypted using TLS/SSL with authentication devices for client- and server-side. All files are saved with AES256 encryption in our private cloud and access is tightly restricted. Additional details Sendbird is dedicated to building and maintaining a solid security program and policy. To achieve this goal, Sendbird has established core security principles based on the ISO 27001 standards. It also incorporates requirements from multiple regulatory certification sources and appropriate industry practices like HIPAA, GDPR, and SOC2. Privacy details Privacy URL