Third Party Index

Snapshot 48491

Document
Trust center
URL
https://trust.landbot.io/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
247953 bytes
SHA-256 (raw)
47e0ca9b79e48045a031d63eb99f4b9e26702681d92db503090c56ce6400f2eb
SHA-256 (normalized text)
272664c4eaba4c794a5e3581d3f025558a2785ef33f073af929a6d8649f533f3

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Landbot
At Landbot, your trust comes first. Our platform is built on strong security and strict data-protection standards, so you can automate conversations with confidence. Your data stays yours, and we ensure policy compliance every step of the way.
[email protected]
Privacy PolicyOpens in new tab
Compliance
SOC 2 Type II
GDPR
Resources
View all
Accessibility Statement
Opens in new tab
GDPR Compliance Certificate
Penetration Test Summary
Privacy Policy
Opens in new tab
SOC 2 Type II Report
Status Page
Opens in new tab
Terms & Conditions
Opens in new tab
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 7 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Vulnerability and system monitoring procedures established
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 33 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
View 1 more Data and privacy control
Subprocessors
View all
Airtable
•
Data storage and processing
USA
Cloud-based platform for creating collaborative spreadsheets. Used by several teams to perform automations and store customer feedback.
User feedback (which sometimes have non-sensitive user data attached) and customer data collected by the Customer Support team onboarding calls.
Amplitude
•
Data analytics
USA, Germany
Product analytics platform that help us understanding user behaviour by tracking user actions in our app.
User email, full name, phone number, company, and country, plus the history of actions within our app.
Cloudflare
•
Cloud provider
Global
Provides Content Delivery Network (CDN), Web security, Load balancing and DDoS protection.
End‑user IP, device metadata, and web traffic headers and bodies.
dbt Labs
•
Data storage and processing
USA
Cloud orchestration for our data transformations. Processes warehouse data during model runs and stores run metadata/artifacts (not full datasets).
Customer Data in modeled schemas, plus schema/column metadata and run logs
Updates
View all
Compliance
Subprocessor update: Firecrawl added
Published October 2, 2026
We have updated our subprocessor list to reflect a new engineering tool we have adopted, and to keep our documentation aligned with our current operational posture.
What's new
We added Firecrawl (Engineering, USA) as a subprocessor. Its web scraping API converts customer-supplied URLs into LLM-ready data that powers our AI features.
The data shared with Firecrawl is limited to the public URLs supplied by our customers and the page content retrieved from them on our customers' behalf, plus related request metadata.
The complete and updated list is available under the Subprocessors tab. If you have any questions regarding this update, please contact us at [email protected].
Compliance
Subprocessor update: OurBase added
Published July 7, 2026
We have updated our subprocessor list to reflect a new engineering tool we have adopted, and to keep our documentation aligned with our current operational posture.
What's new
We added OurBase (Engineering, Europe/USA) as a subprocessor. It provides AI-assisted incident resolution and debugging, analyzing application error and incident data to help us diagnose and fix issues faster.
Personal data is limited to residual, incidental data in error content. User identity and IP addresses are not transmitted, and PII scrubbing is applied at source.
The complete and updated list is available under the Subprocessors tab. If you have any questions regarding this update, please contact us at [email protected].
Privacy
Privacy Policy update: AI-powered tools
Published April 15, 2026
We have updated Section 6 (Recipients and Personal Data Transfers) of our Privacy PolicyOpens in new tab to provide clearer information about how we use AI-powered tools in our internal operations and how personal data is processed in that context.
What has changed
We clarify when third-party processors use AI as part of their services, including international transfers and the safeguards we apply (such as Standard Contractual Clauses).
We describe how we use AI for internal workflows like content drafting, code assistance, analysis, and customer support.
We confirm that data processed through our commercial accounts is not used to train vendor AI models, and we outline retention practices and how you can exercise your rights.
If you have any questions, please contact our Legal team at [email protected].
Compliance
Landbot's Abuse Policy Published
Published November 24, 2025
As part of our ongoing effort to centralise all key governance documents and make them more accessible, we have migrated our Abuse PolicyOpens in new tab from Knowledge CenterOpens in new tab to the Trust Center.
This transition provided the ideal opportunity to review the document and present it as a clearer, better-structured formal policy while keeping the content materially unchanged.
The policy is now centrally available right here on the Trust Center. You can find it in the Resources sectionOpens in new tab.
Read more about Subprocessor update: Firecrawl added
Landbot
At Landbot, your trust comes first. Our platform is built on strong security and strict data-protection standards, so you can automate conversations with confidence. Your data stays yours, and we ensure policy compliance every step of the way.
[email protected]
Privacy PolicyOpens in new tab
Compliance
SOC 2 Type II
GDPR
Resources
View all
Accessibility Statement
Opens in new tab
GDPR Compliance Certificate
Penetration Test Summary
Privacy Policy
Opens in new tab
SOC 2 Type II Report
Status Page
Opens in new tab
Terms & Conditions
Opens in new tab
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 7 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Vulnerability and system monitoring procedures established
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 33 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
View 1 more Data and privacy control
Subprocessors
View all
Airtable
•
Data storage and processing
USA
Cloud-based platform for creating collaborative spreadsheets. Used by several teams to perform automations and store customer feedback.
User feedback (which sometimes have non-sensitive user data attached) and customer data collected by the Customer Support team onboarding calls.
Amplitude
•
Data analytics
USA, Germany
Product analytics platform that help us understanding user behaviour by tracking user actions in our app.
User email, full name, phone number, company, and country, plus the history of actions within our app.
Cloudflare
•
Cloud provider
Global
Provides Content Delivery Network (CDN), Web security, Load balancing and DDoS protection.
End‑user IP, device metadata, and web traffic headers and bodies.
dbt Labs
•
Data storage and processing
USA
Cloud orchestration for our data transformations. Processes warehouse data during model runs and stores run metadata/artifacts (not full datasets).
Customer Data in modeled schemas, plus schema/column metadata and run logs
Updates
View all
Compliance
Subprocessor update: Firecrawl added
Published October 2, 2026
We have updated our subprocessor list to reflect a new engineering tool we have adopted, and to keep our documentation aligned with our current operational posture.
What's new
We added Firecrawl (Engineering, USA) as a subprocessor. Its web scraping API converts customer-supplied URLs into LLM-ready data that powers our AI features.
The data shared with Firecrawl is limited to the public URLs supplied by our customers and the page content retrieved from them on our customers' behalf, plus related request metadata.
The complete and updated list is available under the Subprocessors tab. If you have any questions regarding this update, please contact us at [email protected].
Compliance
Subprocessor update: OurBase added
Published July 7, 2026
We have updated our subprocessor list to reflect a new engineering tool we have adopted, and to keep our documentation aligned with our current operational posture.
What's new
We added OurBase (Engineering, Europe/USA) as a subprocessor. It provides AI-assisted incident resolution and debugging, analyzing application error and incident data to help us diagnose and fix issues faster.
Personal data is limited to residual, incidental data in error content. User identity and IP addresses are not transmitted, and PII scrubbing is applied at source.
The complete and updated list is available under the Subprocessors tab. If you have any questions regarding this update, please contact us at [email protected].
Privacy
Privacy Policy update: AI-powered tools
Published April 15, 2026
We have updated Section 6 (Recipients and Personal Data Transfers) of our Privacy PolicyOpens in new tab to provide clearer information about how we use AI-powered tools in our internal operations and how personal data is processed in that context.
What has changed
We clarify when third-party processors use AI as part of their services, including international transfers and the safeguards we apply (such as Standard Contractual Clauses).
We describe how we use AI for internal workflows like content drafting, code assistance, analysis, and customer support.
We confirm that data processed through our commercial accounts is not used to train vendor AI models, and we outline retention practices and how you can exercise your rights.
If you have any questions, please contact our Legal team at [email protected].
Compliance
Landbot's Abuse Policy Published
Published November 24, 2025
As part of our ongoing effort to centralise all key governance documents and make them more accessible, we have migrated our Abuse PolicyOpens in new tab from Knowledge CenterOpens in new tab to the Trust Center.
This transition provided the ideal opportunity to review the document and present it as a clearer, better-structured formal policy while keeping the content materially unchanged.
The policy is now centrally available right here on the Trust Center. You can find it in the Resources sectionOpens in new tab.
Read more about Subprocessor update: OurBase added
Landbot
At Landbot, your trust comes first. Our platform is built on strong security and strict data-protection standards, so you can automate conversations with confidence. Your data stays yours, and we ensure policy compliance every step of the way.
[email protected]
Privacy PolicyOpens in new tab
Compliance
SOC 2 Type II
GDPR
Resources
View all
Accessibility Statement
Opens in new tab
GDPR Compliance Certificate
Penetration Test Summary
Privacy Policy
Opens in new tab
SOC 2 Type II Report
Status Page
Opens in new tab
Terms & Conditions
Opens in new tab
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 15 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Production inventory maintained
Portable media encrypted
View 7 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Vulnerability and system monitoring procedures established
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 33 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
View 1 more Data and privacy control
Subprocessors
View all
Airtable
•
Data storage and processing
USA
Cloud-based platform for creating collaborative spreadsheets. Used by several teams to perform automations and store customer feedback.
User feedback (which sometimes have non-sensitive user data attached) and customer data collected by the Customer Support team onboarding calls.
Amplitude
•
Data analytics
USA, Germany
Product analytics platform that help us understanding user behaviour by tracking user actions in our app.
User email, full name, phone number, company, and country, plus the history of actions within our app.
Cloudflare
•
Cloud provider
Global
Provides Content Delivery Network (CDN), Web security, Load balancing and DDoS protection.
End‑user IP, device metadata, and web traffic headers and bodies.
dbt Labs
•
Data storage and processing
USA
Cloud orchestration for our data transformations. Processes warehouse data during model runs and stores run metadata/artifacts (not full datasets).
Customer Data in modeled schemas, plus schema/column metadata and run logs
Updates
View all
Compliance
Subprocessor update: Firecrawl added
Published October 2, 2026
We have updated our subprocessor list to reflect a new engineering tool we have adopted, and to keep our documentation aligned with our current operational posture.
What's new
We added Firecrawl (Engineering, USA) as a subprocessor. Its web scraping API converts customer-supplied URLs into LLM-ready data that powers our AI features.
The data shared with Firecrawl is limited to the public URLs supplied by our customers and the page content retrieved from them on our customers' behalf, plus related request metadata.
The complete and updated list is available under the Subprocessors tab. If you have any questions regarding this update, please contact us at [email protected].
Compliance
Subprocessor update: OurBase added
Published July 7, 2026
We have updated our subprocessor list to reflect a new engineering tool we have adopted, and to keep our documentation aligned with our current operational posture.
What's new
We added OurBase (Engineering, Europe/USA) as a subprocessor. It provides AI-assisted incident resolution and debugging, analyzing application error and incident data to help us diagnose and fix issues faster.
Personal data is limited to residual, incidental data in error content. User identity and IP addresses are not transmitted, and PII scrubbing is applied at source.
The complete and updated list is available under the Subprocessors tab. If you have any questions regarding this update, please contact us at [email protected].
Privacy
Privacy Policy update: AI-powered tools
Published April 15, 2026
We have updated Section 6 (Recipients and Personal Data Transfers) of our Privacy PolicyOpens in new tab to provide clearer information about how we use AI-powered tools in our internal operations and how personal data is processed in that context.
What has changed
We clarify when third-party processors use AI as part of their services, including international transfers and the safeguards we apply (such as Standard Contractual Clauses).
We describe how we use AI for internal workflows like content drafting, code assistance, analysis, and customer support.
We confirm that data processed through our commercial accounts is not used to train vendor AI models, and we outline retention practices and how you can exercise your rights.
If you have any questions, please contact our Legal team at [email protected].
Compliance
Landbot's Abuse Policy Published
Published November 24, 2025
As part of our ongoing effort to centralise all key governance documents and make them more accessible, we have migrated our Abuse PolicyOpens in new tab from Knowledge CenterOpens in new tab to the Trust Center.
This transition provided the ideal opportunity to review the document and present it as a clearer, better-structured formal policy while keeping the content materially unchanged.
The policy is now centrally available right here on the Trust Center. You can find it in the Resources sectionOpens in new tab.