Snapshot 256198
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Pinecone trust@pinecone.io Privacy PolicyOpens in new tab Welcome to Pinecone's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation. Compliance CCPA ISO 27001:2022 SOC 2 GDPR HIPAA Resources View all Compliance Pinecone - HIPAA Completion Letter.docx (1).pdf Pinecone Systems Inc. SOC2 Type II 2025 -Final report.pdf SOC 2 Bridge letter Policy Vulnerability and Threat Management Policy.pdf System and Network Management Policy.pdf Physical Security Policy.pdf Third Party Risk Management Policy.pdf View 22 more Penetration Testing Pinecone-3-2025_-_HackerOne_Penetration_Test_Report_v1 (1).pdf Terms Terms of Service Opens in new tab Other Pinecone Systems Insurance- 2025.pdf Pinecone_Architecture.pngOpens in new tab FedRAMP 20x Class A Machine Readable - Certification Package Overview (CPO) Machine Readable - Ongoing Certification Report (OCR, example) Machine Readable - SAMPLE Initial Incident Report (IIR) Machine Readable - SAMPLE Ongoing Incident Report (OIR) View 6 more Other resources Pinecone Responsible AI & Assurance Policy.docx Controls View all Infrastructure security Amazon Web Services Anti-DDoS BC/DR View 3 more Infrastructure security controls Organizational security Employee background checks performed Production inventory maintained Security awareness training implemented View 4 more Organizational security controls Product security Vulnerability and system monitoring procedures established Audit Logging Change Management View 7 more Product security controls Internal security procedures Information Security Policies Security Leadership Risk Management Program View 8 more Internal security procedures controls Data and privacy Data Erasure & Retention Data Encryption Data Processing Addendum View 9 more Data and privacy controls Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all AWS • Cloud Provider USA and customer-selected regions Includes model hosting for pinecone services Microsoft Azure • Cloud provider USA and customer-selected cloud regions Includes model hosting for Pinecone AI Services Google Cloud Platform (GCP) • Cloud provider USA and customer-selected cloud regions Share Confidential Information, Share Personal Identifiable Information, Provides Managed / Professional Services, Provides Technology / Software Pylon • Customer support California, USA Provides Technology / Software Updates View all Incident Pinecone’s Response to eMudhra Certificate Authority Compromise Published October 22, 2026 On October 20, 2026, Mozilla disclosed that the private keys of eight intermediate certificate authorities run by eMudhra (emSign) had been compromised. Certificates issued by these CAs can no longer be trusted. Mozilla, Google and Apple have since moved to block them. This affects the whole industry and is not specific to Pinecone. Affected intermediate CAs: EM EV TLS CA - G3B / G3C EM OV TLS CA - G3B / G3C EM DV TLS CA - G3B / G3C EM OV CS CA - G3B / G3C Pinecone’s security team reviewed where these CAs could be trusted across our production services, internal systems and corporate endpoints. We have updated the trust stores across our internal systems to remove the compromised certificates. We found no impact to Pinecone services or customer data, and we will keep monitoring. We recommend that customers keep their operating systems, browsers and container base images up to date so the revoked certificates are removed from local trust stores. Security Pinecone’s Response to PHP2Shell Vulnerabilities Published October 22, 2026 On October 21, 2026, the PHP project released security updates for two critical remote code execution vulnerabilities, known as “PHP2Shell”. The fixes are in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. PHP 5.x through 8.1 are also affected but are end-of-life and will not receive patches. Pinecone’s security team reviewed our production and corporate environments and found that Pinecone is not affected. The Pinecone platform does not run PHP-based services. Pinecone client SDKs do not include PHP.