Third Party Index

Snapshot 34702

Document
Trust center
URL
https://trust.sierra.ai/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
321625 bytes
SHA-256 (raw)
8885ca5cbc7e684b329079347cbd4efcf096bd9e9a39a3a37029345736693552
SHA-256 (normalized text)
6d244ef94aa96f30ca93fb059aafcc18b8339fccacf4fac75316c5ea6393bcb5

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Sierra
[email protected]
Welcome to Sierra's Trust Center, where our commitment to data privacy and security is central to our operations. Sierra's conversational AI platform enables your company to build an AI agent that is personalized to your business and customers.
This Trust Center offers detailed insights into our security practices, including the specific controls and policies implemented by our teams. You can explore our compliance standards, request access to comprehensive security documentation, and gain a clear understanding of how we safeguard your data.
Additionally, we invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives by clicking on the bell icon on the top right of this page.
Compliance
ISO/IEC 27001:2022
ISO/IEC 42001:2023
SOC 2
HIPAA
PCI DSS 4.0.1
GDPR
CCPA
CSA STAR
EU AI ACT
FedRAMP High
AIUC-1
Resources
View all
3rd Party Assessments and Certifications
ISO/IEC 27001:2022
ISO/IEC 42001:2023
Sierra SOC 2 Type II Audit Report (2026)
Sierra HIPAA Audit Report (2026)
View 4 more
Questionnaires
SIG Lite
Privacy
Sierra - Data Transfer Impact Assessment for the USA
Enabling Healthcare: HIPAA for AI Agents
Enabling EU Customer Privacy: General Data Protection Regulation
Security
Trust in Every Conversation:‬ ‭Sierra’s Secure and Responsible AI‬ ‭Agent Framework‬
Security Exhibit
Other resources
Sierra Customer PCI Responsibility Summary 2026.xlsx
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 18 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 11 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 29 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Amazon Web Services, Inc.
•
Data storage, cloud hosting, and AI services
Global (localization available in United States, European Union, Southeast Asia, Japan, Australia)
Anthropic, PBC
•
AI services
United States
Google LLC
•
AI services
Global (localization available in United States, European Union)
Microsoft Corporation
•
AI services
Global (localization available in United States, European Union)
Updates
View all
General
New Subprocessor Update
Published June 2, 2026
We are adding the following entities to our list of subprocessors: Baseten, Fireworks AI, Together AI, and Modal. These subprocessors will be used in support of AI services available through our Platform Services. We are also updating our list of subprocessors to include processing locations and refreshed service descriptions. For more information, please visit the Subprocessors List within our Trust Center.
Compliance
Updated SOC 2 & HIPAA Artifacts
Published February 19, 2026
Sierra's updated compliance artifacts are now available in the Trust Center. This includes the refreshed SOC 2 Type II and HIPAA attestation reports.
General
PCI DSS v4.0.1
Published November 1, 2025
We are excited to announce that Sierra has a PCI DSS AOC, Payment Card Industry Data Security Standard (PCI DSS) is a global standard designed to protect payment account data.
General
New Subprocessor Notification
Published July 21, 2025
We are adding the following entities to our list of Subprocessors: Google, Anthropic, and an additional processing purpose for AWS. These three subprocessors will be used in support of model serving (e.g., large language models) available through our Platform Services. For more information, please visit the Subprocessors List within our Trust Center.
Read more about New Subprocessor Update
Sierra
[email protected]
Welcome to Sierra's Trust Center, where our commitment to data privacy and security is central to our operations. Sierra's conversational AI platform enables your company to build an AI agent that is personalized to your business and customers.
This Trust Center offers detailed insights into our security practices, including the specific controls and policies implemented by our teams. You can explore our compliance standards, request access to comprehensive security documentation, and gain a clear understanding of how we safeguard your data.
Additionally, we invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives by clicking on the bell icon on the top right of this page.
Compliance
ISO/IEC 27001:2022
ISO/IEC 42001:2023
SOC 2
HIPAA
PCI DSS 4.0.1
GDPR
CCPA
CSA STAR
EU AI ACT
FedRAMP High
AIUC-1
Resources
View all
3rd Party Assessments and Certifications
ISO/IEC 27001:2022
ISO/IEC 42001:2023
Sierra SOC 2 Type II Audit Report (2026)
Sierra HIPAA Audit Report (2026)
View 4 more
Questionnaires
SIG Lite
Privacy
Sierra - Data Transfer Impact Assessment for the USA
Enabling Healthcare: HIPAA for AI Agents
Enabling EU Customer Privacy: General Data Protection Regulation
Security
Trust in Every Conversation:‬ ‭Sierra’s Secure and Responsible AI‬ ‭Agent Framework‬
Security Exhibit
Other resources
Sierra Customer PCI Responsibility Summary 2026.xlsx
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 18 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 11 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 29 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Amazon Web Services, Inc.
•
Data storage, cloud hosting, and AI services
Global (localization available in United States, European Union, Southeast Asia, Japan, Australia)
Anthropic, PBC
•
AI services
United States
Google LLC
•
AI services
Global (localization available in United States, European Union)
Microsoft Corporation
•
AI services
Global (localization available in United States, European Union)
Updates
View all
General
New Subprocessor Update
Published June 2, 2026
We are adding the following entities to our list of subprocessors: Baseten, Fireworks AI, Together AI, and Modal. These subprocessors will be used in support of AI services available through our Platform Services. We are also updating our list of subprocessors to include processing locations and refreshed service descriptions. For more information, please visit the Subprocessors List within our Trust Center.
Compliance
Updated SOC 2 & HIPAA Artifacts
Published February 19, 2026
Sierra's updated compliance artifacts are now available in the Trust Center. This includes the refreshed SOC 2 Type II and HIPAA attestation reports.
General
PCI DSS v4.0.1
Published November 1, 2025
We are excited to announce that Sierra has a PCI DSS AOC, Payment Card Industry Data Security Standard (PCI DSS) is a global standard designed to protect payment account data.
General
New Subprocessor Notification
Published July 21, 2025
We are adding the following entities to our list of Subprocessors: Google, Anthropic, and an additional processing purpose for AWS. These three subprocessors will be used in support of model serving (e.g., large language models) available through our Platform Services. For more information, please visit the Subprocessors List within our Trust Center.
Read more about New Subprocessor Notification
Sierra
[email protected]
Welcome to Sierra's Trust Center, where our commitment to data privacy and security is central to our operations. Sierra's conversational AI platform enables your company to build an AI agent that is personalized to your business and customers.
This Trust Center offers detailed insights into our security practices, including the specific controls and policies implemented by our teams. You can explore our compliance standards, request access to comprehensive security documentation, and gain a clear understanding of how we safeguard your data.
Additionally, we invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives by clicking on the bell icon on the top right of this page.
Compliance
ISO/IEC 27001:2022
ISO/IEC 42001:2023
SOC 2
HIPAA
PCI DSS 4.0.1
GDPR
CCPA
CSA STAR
EU AI ACT
FedRAMP High
AIUC-1
Resources
View all
3rd Party Assessments and Certifications
ISO/IEC 27001:2022
ISO/IEC 42001:2023
Sierra SOC 2 Type II Audit Report (2026)
Sierra HIPAA Audit Report (2026)
View 4 more
Questionnaires
SIG Lite
Privacy
Sierra - Data Transfer Impact Assessment for the USA
Enabling Healthcare: HIPAA for AI Agents
Enabling EU Customer Privacy: General Data Protection Regulation
Security
Trust in Every Conversation:‬ ‭Sierra’s Secure and Responsible AI‬ ‭Agent Framework‬
Security Exhibit
Other resources
Sierra Customer PCI Responsibility Summary 2026.xlsx
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 18 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 11 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 29 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Amazon Web Services, Inc.
•
Data storage, cloud hosting, and AI services
Global (localization available in United States, European Union, Southeast Asia, Japan, Australia)
Anthropic, PBC
•
AI services
United States
Google LLC
•
AI services
Global (localization available in United States, European Union)
Microsoft Corporation
•
AI services
Global (localization available in United States, European Union)
Updates
View all
General
New Subprocessor Update
Published June 2, 2026
We are adding the following entities to our list of subprocessors: Baseten, Fireworks AI, Together AI, and Modal. These subprocessors will be used in support of AI services available through our Platform Services. We are also updating our list of subprocessors to include processing locations and refreshed service descriptions. For more information, please visit the Subprocessors List within our Trust Center.
Compliance
Updated SOC 2 & HIPAA Artifacts
Published February 19, 2026
Sierra's updated compliance artifacts are now available in the Trust Center. This includes the refreshed SOC 2 Type II and HIPAA attestation reports.
General
PCI DSS v4.0.1
Published November 1, 2025
We are excited to announce that Sierra has a PCI DSS AOC, Payment Card Industry Data Security Standard (PCI DSS) is a global standard designed to protect payment account data.
General
New Subprocessor Notification
Published July 21, 2025
We are adding the following entities to our list of Subprocessors: Google, Anthropic, and an additional processing purpose for AWS. These three subprocessors will be used in support of model serving (e.g., large language models) available through our Platform Services. For more information, please visit the Subprocessors List within our Trust Center.