Snapshot 2148
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust and Security Center Start your security review Overview Welcome to Pinecone's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation. Compliance CCPA GDPR HIPAA ISO/IEC 27001 SOC 2 Subprocessors Documents REPORTSPentest Report REPORTSSOC 2 Report COMPLIANCEHIPAA COMPLIANCEISO/IEC 27001 COMPLIANCESOC 2 SELF-ASSESSMENTSCAIQ PRODUCT SECURITYProduct Architecture LEGALCyber Insurance POLICIESAcceptable Use Policy POLICIESAccess Control Policy POLICIESAsset Management Policy POLICIESBackup Policy Risk Profile Data Access LevelInternal Impact LevelModerate Recovery Time Objective4 hours View more Product Security Audit Logging Data Security Integrations View more Reports HIPAA Report Pentest Report SOC 2 Report Self-Assessments CAIQ Data Security Access Monitoring Data Backups Data Erasure View more App Security Code Analysis Credential Management Software Development Lifecycle View more Legal Subprocessors Cyber Insurance Data Processing Agreement View more Data Privacy Cookies Data Breach Notifications Data Into System View more Access Control Data Access Logging Password Security Infrastructure Status Monitoring Amazon Web Services Anti-DDoS View more Endpoint Security Disk Encryption Endpoint Detection & Response Mobile Device Management Network Security Bot Detection Security Information and Event Management Corporate Security Asset Management Practices Email Protection Employee Training View more Policies Acceptable Use Policy Access Control Policy Anti-Malicious Software Policy View more Security Grades We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available. Trust and Security Center Updates ISO Compliance We are thrilled to announce that Pinecone has successfully completed our annual ISO 27001:2022 surveillance audit, ensuring our certification remains fully active! This ongoing milestone underscores our unwavering commitment to providing the highest standards of information security for our valued customers year after year. Passing this audit validates that Pinecone continues to uphold and actively manage rigorous, industry-leading security controls to safeguard your data. For complete transparency, you can verify our active certification status using the certificate number via the IAF CertSearch database. Axios Supply Chain Attack General Pinecone is aware of the recent supply chain attack targeting the axios NPM package. Following a comprehensive audit of our infrastructure and dependencies, we have confirmed that Pinecone is not affected. We have successfully deployed monitoring capabilities and detection logic specifically designed to identify these compromised versions. We are actively scanning our environments to prevent any potential impact on our services or customers. Vercel April 2026 Incident - Pinecone Advisory Incidents What happened On April 19, 2026, Vercel disclosed a security incident involving unauthorized access to certain internal Vercel systems. For more details, see Vercel's official security bulletin Is Pinecone affected? No. Pinecone was not directly compromised. We completed an internal investigation and confirmed: The Context.ai OAuth application identified in the breach was never installed or authorized in Pinecone's Google Workspace. There is no record of Context.ai in use at Pinecone. Vercel has communicated to us that they do not have reason to believe Pinecone credentials or personal data were compromised. Pinecone's core infrastructure, customer data, and API services were not impacted by this incident. What we did Out of an abundance of caution, Pinecone's security team took the following actions: Rotated all environment variables associated with our Vercel-hosted projects Verified that the malicious OAuth application was not present in our Google Workspace. Reviewed Vercel activity logs for any signs of suspicious access. Confirmed deployment protection settings across all Vercel projects. All remediation actions have been completed. No action is required by Pinecone customers This incident did not affect Pinecone's services, customer data, or API keys. We will continue to monitor the situation and will provide updates if any new information warrants further action. SOC2 Update Compliance We are proud to announce the successful completion of our 2025 SOC 2 Type II audit, which confirmed that our security, availability, and confidentiality controls operated with zero deviations. This milestone reinforces our commitment to providing a secure and reliable vector database for your production applications. The full report is now available for review in our safety center. Shai-Hulud Vulnerabilities Pinecone is aware of the ongoing Shai-Hulud and Shai-Hulud 2.0 worm campaigns targeting the NPM ecosystem. Following a comprehensive audit of our infrastructure and dependencies, we have confirmed that Pinecone is not affected. We have successfully deployed monitoring capabilities and detection logic specifically designed to identify this worm. We are actively scanning for compromised packages to prevent any impact on our services or customers. Pinecone is reviewed and trusted by DISCO Terminal X Aquant Chipper Cash Inkeep New Relic Vanguard Obviant Shortwave Expel Gong ClickUp If you need help using this Trust and Security Center, please contact us. Contact support