Snapshot 257943
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Conveo Conveo democratizes and scales in-depth market research while going from question to results in a day instead of weeks. How? Scaling by talking to 100s of consumers with AI-moderated conversations via video, voice & text, saving hundreds of hours with our AI research expert assisting you at every step, from set-up, recruiting, and moderation, to analysis. security@conveo.ai Privacy PolicyOpens in new tab On 21 October 2026, PHP disclosed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution on systems running PHP. Conveo is not affected. PHP isn’t part of our stack. It doesn’t run in our production or staging environments, and our vulnerability scanning shows no affected assets. We’re also monitoring our critical subprocessors as part of our usual vendor risk process. We’ll update this notice if anything changes. Questions? Contact security@conveo.ai. Compliance SOC 2 - Type II GDPR ISO 27701 ISO 27001:2022 Resources View all Certifications SOC 2 - Type II SOC 3 ISO 27001:2022 ISO 27701:2019 View 1 more Penetration testing Pentest 2026 Policies Reporting Concerns Reporting AI Concerns Opens in new tab Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 13 more Infrastructure security controls Organizational security Confidentiality Agreement acknowledged by contractors Password policy enforced MDM system utilized View 1 more Organizational security control Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Cybersecurity insurance maintained Configuration management system established SOC 2 - System Description View 19 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all AWS • Cloud Provider EU Processing Activity Description Core hosting infrastructure for the Conveo platform, including compute, storage, and networking. Data Residency / Processing Location European Union Headquarters Location Seattle, Washington,, United States Google Cloud Platform • Gemini AI Models EU, UK, US Processing Activity Description Gemini AI Models Data Residency / Processing Location Global Endpoints Headquarters Location Mountain View, United States (subsidiary of Alphabet Inc.) OpenAI • LLM Model US Processing Activity Description Powers Conveo's AI agent for conducting and analyzing AI-led video interviews. Data Residency / Processing Location United States Headquarters Location San Francisco, United States Google Workspace • Business Applications US Processing Activity Description Document management and internal collaboration (Drive, Sheets etc). Data Residency / Processing Location US Headquarters Location Mountain View, United States (subsidiary of Alphabet Inc.) Updates View all General Nov 2026 - Subprocessor Notification Published November 6, 2026 We're adding two sub-processors to support the Conveo platform: Reducto: document parsing, OCR and data extraction. Processing takes place in the EU. Effective immediately. Anam: real-time AI avatars and personas used to present research results. Anam will be added to our sub-processor list from **6 December 2026**. Security October 2026 - PHP Vulnerabilities Published October 23, 2026 On 21 October 2026, PHP disclosed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution on systems running PHP. Conveo is not affected. PHP isn’t part of our stack. It doesn’t run in our production or staging environments, and our vulnerability scanning shows no affected assets. We’re also monitoring our critical subprocessors as part of our usual vendor risk process. We’ll update this notice if anything changes General October 2026 - Subprocessor Notification Published October 16, 2026 We’ve added two sub-processors to support the Conveo platform: ElevenLabs: speech-to-text transcription of interview audio, and the voice of our AI moderator. Grafana Labs: platform monitoring and observability, including tracing of AI model calls. Grafana replaces LangSmith for LLM observability. Both are bound by a data processing agreement and assessed under our vendor risk process. You’ll find the details in our sub-processor list. If you have questions, contact security@conveo.ai. General September 2026 - Subprocessor Notication Published September 29, 2026 We've added Anthropic to our sub-processor list. Anthropic provides presentation / deck generation services within the Conveo platform Read more about Nov 2026 - Subprocessor Notification Conveo Conveo democratizes and scales in-depth market research while going from question to results in a day instead of weeks. How? Scaling by talking to 100s of consumers with AI-moderated conversations via video, voice & text, saving hundreds of hours with our AI research expert assisting you at every step, from set-up, recruiting, and moderation, to analysis. security@conveo.ai Privacy PolicyOpens in new tab On 21 October 2026, PHP disclosed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution on systems running PHP. Conveo is not affected. PHP isn’t part of our stack. It doesn’t run in our production or staging environments, and our vulnerability scanning shows no affected assets. We’re also monitoring our critical subprocessors as part of our usual vendor risk process. We’ll update this notice if anything changes. Questions? Contact security@conveo.ai. Compliance SOC 2 - Type II GDPR ISO 27701 ISO 27001:2022 Resources View all Certifications SOC 2 - Type II SOC 3 ISO 27001:2022 ISO 27701:2019 View 1 more Penetration testing Pentest 2026 Policies Reporting Concerns Reporting AI Concerns Opens in new tab Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 13 more Infrastructure security controls Organizational security Confidentiality Agreement acknowledged by contractors Password policy enforced MDM system utilized View 1 more Organizational security control Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Cybersecurity insurance maintained Configuration management system established SOC 2 - System Description View 19 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all AWS • Cloud Provider EU Processing Activity Description Core hosting infrastructure for the Conveo platform, including compute, storage, and networking. Data Residency / Processing Location European Union Headquarters Location Seattle, Washington,, United States Google Cloud Platform • Gemini AI Models EU, UK, US Processing Activity Description Gemini AI Models Data Residency / Processing Location Global Endpoints Headquarters Location Mountain View, United States (subsidiary of Alphabet Inc.) OpenAI • LLM Model US Processing Activity Description Powers Conveo's AI agent for conducting and analyzing AI-led video interviews. Data Residency / Processing Location United States Headquarters Location San Francisco, United States Google Workspace • Business Applications US Processing Activity Description Document management and internal collaboration (Drive, Sheets etc). Data Residency / Processing Location US Headquarters Location Mountain View, United States (subsidiary of Alphabet Inc.) Updates View all General Nov 2026 - Subprocessor Notification Published November 6, 2026 We're adding two sub-processors to support the Conveo platform: Reducto: document parsing, OCR and data extraction. Processing takes place in the EU. Effective immediately. Anam: real-time AI avatars and personas used to present research results. Anam will be added to our sub-processor list from **6 December 2026**. Security October 2026 - PHP Vulnerabilities Published October 23, 2026 On 21 October 2026, PHP disclosed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution on systems running PHP. Conveo is not affected. PHP isn’t part of our stack. It doesn’t run in our production or staging environments, and our vulnerability scanning shows no affected assets. We’re also monitoring our critical subprocessors as part of our usual vendor risk process. We’ll update this notice if anything changes General October 2026 - Subprocessor Notification Published October 16, 2026 We’ve added two sub-processors to support the Conveo platform: ElevenLabs: speech-to-text transcription of interview audio, and the voice of our AI moderator. Grafana Labs: platform monitoring and observability, including tracing of AI model calls. Grafana replaces LangSmith for LLM observability. Both are bound by a data processing agreement and assessed under our vendor risk process. You’ll find the details in our sub-processor list. If you have questions, contact security@conveo.ai. General September 2026 - Subprocessor Notication Published September 29, 2026 We've added Anthropic to our sub-processor list. Anthropic provides presentation / deck generation services within the Conveo platform Read more about October 2026 - Subprocessor Notification Conveo Conveo democratizes and scales in-depth market research while going from question to results in a day instead of weeks. How? Scaling by talking to 100s of consumers with AI-moderated conversations via video, voice & text, saving hundreds of hours with our AI research expert assisting you at every step, from set-up, recruiting, and moderation, to analysis. security@conveo.ai Privacy PolicyOpens in new tab On 21 October 2026, PHP disclosed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution on systems running PHP. Conveo is not affected. PHP isn’t part of our stack. It doesn’t run in our production or staging environments, and our vulnerability scanning shows no affected assets. We’re also monitoring our critical subprocessors as part of our usual vendor risk process. We’ll update this notice if anything changes. Questions? Contact security@conveo.ai. Compliance SOC 2 - Type II GDPR ISO 27701 ISO 27001:2022 Resources View all Certifications SOC 2 - Type II SOC 3 ISO 27001:2022 ISO 27701:2019 View 1 more Penetration testing Pentest 2026 Policies Reporting Concerns Reporting AI Concerns Opens in new tab Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 13 more Infrastructure security controls Organizational security Confidentiality Agreement acknowledged by contractors Password policy enforced MDM system utilized View 1 more Organizational security control Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Cybersecurity insurance maintained Configuration management system established SOC 2 - System Description View 19 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all AWS • Cloud Provider EU Processing Activity Description Core hosting infrastructure for the Conveo platform, including compute, storage, and networking. Data Residency / Processing Location European Union Headquarters Location Seattle, Washington,, United States Google Cloud Platform • Gemini AI Models EU, UK, US Processing Activity Description Gemini AI Models Data Residency / Processing Location Global Endpoints Headquarters Location Mountain View, United States (subsidiary of Alphabet Inc.) OpenAI • LLM Model US Processing Activity Description Powers Conveo's AI agent for conducting and analyzing AI-led video interviews. Data Residency / Processing Location United States Headquarters Location San Francisco, United States Google Workspace • Business Applications US Processing Activity Description Document management and internal collaboration (Drive, Sheets etc). Data Residency / Processing Location US Headquarters Location Mountain View, United States (subsidiary of Alphabet Inc.) Updates View all General Nov 2026 - Subprocessor Notification Published November 6, 2026 We're adding two sub-processors to support the Conveo platform: Reducto: document parsing, OCR and data extraction. Processing takes place in the EU. Effective immediately. Anam: real-time AI avatars and personas used to present research results. Anam will be added to our sub-processor list from **6 December 2026**. Security October 2026 - PHP Vulnerabilities Published October 23, 2026 On 21 October 2026, PHP disclosed two critical vulnerabilities, known as PHP2Shell, that allow remote code execution on systems running PHP. Conveo is not affected. PHP isn’t part of our stack. It doesn’t run in our production or staging environments, and our vulnerability scanning shows no affected assets. We’re also monitoring our critical subprocessors as part of our usual vendor risk process. We’ll update this notice if anything changes General October 2026 - Subprocessor Notification Published October 16, 2026 We’ve added two sub-processors to support the Conveo platform: ElevenLabs: speech-to-text transcription of interview audio, and the voice of our AI moderator. Grafana Labs: platform monitoring and observability, including tracing of AI model calls. Grafana replaces LangSmith for LLM observability. Both are bound by a data processing agreement and assessed under our vendor risk process. You’ll find the details in our sub-processor list. If you have questions, contact security@conveo.ai. General September 2026 - Subprocessor Notication Published September 29, 2026 We've added Anthropic to our sub-processor list. Anthropic provides presentation / deck generation services within the Conveo platform