Snapshot 200369
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview This Trust Center documents the security, privacy and compliance controls that protect customer data across the Freshworks platform. Use the product selector above to scope the content to the product you are evaluating; cards marked 'Applies across Freshworks' describe controls that operate at the platform or corporate level rather than per product. Available immediately, with no request: our ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certificates, our SOC 3 report, our sub-processor list, our Data Processing Agreement and technical and organisational measures, and our security and privacy whitepaper. Available on request, usually within [1] business day(s): our SOC 1 and SOC 2 Type 2 reports and bridge letters, penetration testing attestations, network architecture and data flow documentation, our business continuity plan and disaster recovery test summary, and our completed SIG and VSA questionnaires. You do not need an existing relationship with Freshworks to request access. Where to start. If you are a CISO, begin with Compliance and Documents. If you are a security architect, begin with Data Security and Infrastructure. If you are a privacy officer, begin with Legal and Data Privacy. If you are assessing AI, begin with Legal → Subprocessors, which names our AI model providers. If you are in procurement, begin with Self-Assessments and Documents. This content is reviewed quarterly. Each card shows the date it was last reviewed. Questions we have not answered here can go to security@freshworks.com Compliance SOC 2 Type 2 Cyber Essentials Cyber Essentials Plus TX-RAMP SOC 3 CCPA EU-US DPF Swiss-US DPF UK Extension to EU-US DPF ISO/IEC 27001 SoA CSA STAR Level 1 ISO/IEC 27001:2022 SOC 1 Type 2 ISO/IEC 27701:2019 Documents Featured Documents DOCUMENTSApplication Vulnerability Assessment and Penetration Testing (VAPT) Report DOCUMENTSData Flow Diagram (DFD) DOCUMENTSInfrastructure Vulnerability Assessment and Penetration Testing (VAPT) Report DOCUMENTSNetwork Architecture Document COMPLIANCESOC 2 Type 2 COMPLIANCETX-RAMP Trust Center Updates Freshworks update on node.js vulnerabilty Vulnerabilities Freshworks is aware of recently reported vulnerabilities affecting Node.js, including high-severity vulnerabilities that may affect applications using vulnerable Node.js versions. Our teams have assessed the applicability of these vulnerabilities to the Freshworks environment and implemented the necessary fixes across affected production systems. Based on the information currently available, we have not identified any evidence of exploitation or impact to Freshworks systems or customer data. In addition to remediation, Freshworks maintains multiple layers of security controls to help protect its systems and customer data. These include: Web Application Firewalls (WAF): Protections designed to detect and block malicious traffic. Cloud Security Controls: Safeguards across our cloud infrastructure to strengthen our security defenses. Continuous Monitoring: Ongoing monitoring and alerting to help identify and respond to suspicious activity. We continue to monitor relevant security developments and assess potential risks to our environment. We will update this notification if new information materially affects our assessment. For any further questions or concerns, please contact security@freshworks.com. Freshworks update on PHP vulnerabilities Vulnerabilities Freshworks is aware of recently reported vulnerabilities affecting PHP, including vulnerabilities that may pose security risks to applications using affected PHP versions. Based on our current assessment, Freshworks applications and infrastructure are not affected by these vulnerabilities, and we have found no impact to Freshworks customer data. This assessment considers the applicability of the reported vulnerabilities to our environment, including relevant third-party dependencies. We continue to monitor relevant security developments and assess potential risks to our environment. We will update this notification if new information materially affects our assessment. Our commitment to the security of our services and customer data remains our top priority. Thank you for your continued trust in Freshworks. For any further questions or concerns, please contact security@freshworks.com. Risk Profile Data Access Level Impact Level Recovery Time Objective View more Product Security Audit Logging Multi-Factor Authentication Role-Based Access Control View more Documents Network Architecture Document Trust Centre User Guide Data Flow Diagram (DFD) View more Self-Assessments CAIQ HECVAT Full SIG Core View more FedRAMP Readiness Contact Information Certification Package Overview (CPO) FedRAMP Marketplace Data Security Data Backups Encryption-at-rest Encryption-in-transit App Security Responsible Disclosure Code Analysis Vulnerability Assessment and Penetration Test Legal Subprocessors Data Processing Agreement Privacy Policy View more Data Privacy Data Breach Notifications Data Privacy Officer Data Protection Impact Assessment (DPIA) Infrastructure Status Monitoring Cloud Service Providers Network Time Protocol Security Grades SecurityScorecard Freshservice Training Phishing Training Secure Development Training Security Awareness Training If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue