Snapshot 83566
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content DataDome Trust Center Securing your digital ecosystem through transparency and rigorous standards. DataDome provides a secure traffic control plane trusted by global enterprises to defend critical applications against bots, fraud, and malicious AI agents. Trust is the foundation of everything we do: from analyzing trillions of signals daily to protecting your websites, mobile apps, APIs and MCP servers, without slowing them down. This Trust Center provides complete transparency into how we ensure continuous security, reliability, data privacy, and compliance, delivering on our promise of zero compromise for your brand and users. security@datadome.co Privacy PolicyOpens in new tab Filter by Compliance SOC 2 GDPR CCPA AWS Security Competency Resources View all DataDome SOC 2 Type 2 Bug Bounty Certificate DataDome - SIG LITE Penetration Testing Attestation - 2026 DataDome SA Cyber Insurance 2026 CyberVadis Certificate AI Responsible Use Policy Controls Updated less than a minute ago View all Infrastructure security Unique account authentication enforced Unique network system authentication enforced Remote access MFA enforced View 7 more Infrastructure security controls Organizational security Portable media encrypted Code of Conduct acknowledged by employees and enforced Confidentiality Agreement acknowledged by employees View 2 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Vulnerability and system monitoring procedures established Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 22 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data collected Customer personally identifiable information used to connect to the DataDome dashboard HTTP Traffic fingerprints from visitors on customers websites Subprocessors View all Amazon Web Services • Cloud provider Worldwide Processing, storage and CDN hosting Google • Cloud provider Worldwide Processing and storage OVH EUROPE • Cloud provider Europe Storage, data pipelines and data streaming analytics SCALEWAY (Online) • Cloud provider Europe Processing, data pipelines and data streaming analytics Updates View all Compliance SOC 2 Type II Report Renewal (April 2025 – March 2026) Published April 17, 2026 We are pleased to share that DataDome has successfully completed a new SOC 2 Type II report (April 2025 – March 2026). This independent assessment was conducted by Coalfire and covers the Security, Availability, and Confidentiality Trust Services Criteria across our entire Cyberfraud Protection Platform. The full SOC 2 Type II report is available in our Trust Center. General CISA Secure by Design Pledge Published December 30, 2025 DataDome has signed the CISA Secure by Design Pledge, reinforcing our commitment to embedding security throughout the product lifecycle. This initiative aligns with our long-standing approach to building secure, resilient products by design. Learn more: https://datadome.co/data-privacy/commitment-cisa-secure-by-design-pledge/Opens in new tab https://www.cisa.gov/securebydesign/pledge/progress-reportsOpens in new tab Security DataDome's Response to React Server Component’s RCE Vulnerability (CVE-2025-55182) Published December 5, 2025 A recently disclosed Remote Code Execution (RCE) vulnerability affecting React Server and Next.js, tracked as CVE-2025-55182, may allow attackers to execute arbitrary code by abusing specific server actions and request patterns. Impact on DataDome DataDome does not use React Server or Next.js in the delivery of its services. As a result, DataDome’s infrastructure and platform are not affected by this vulnerability. DataDome provides an optional integration module for customers using these frameworks. This module is not impacted by CVE-2025-55182. A demo application previously offered to test the integration has been updated to use patched versions of the affected components. Recommendations for Customers If your applications rely on React Server or Next.js, we recommend that you: Update to the latest patched versions of the affected frameworks. Review any server actions in your codebase that could be exposed to RCE conditions. Ensure your CI/CD pipelines and dependency management systems pull the patched releases. DataDome’s integration module does not require any updates, but your application components must be kept up to date to remain secure. DataDome Protection and Monitoring DataDome monitors and protects against malicious traffic patterns associated with this vulnerability. Our detection engine inspects: Requests containing next-action or rsc-action-id headers Requests targeting POST URLs beginning with /_next/ Suspicious activity matching these indicators is blocked in real time. Incident Sha1-Hulud (2.0) NPM Supply Chain Attack - No impact to DataDome Published November 25, 2025 DataDome is monitoring the newly reported “Shai-Hulud 2.0” npm supply-chain campaign. After a thorough review of our build pipelines and dependencies, we confirm that no DataDome systems, products, or customer environments are impacted. We continue to maintain strict isolation, code-integrity controls, and continuous monitoring across all build and deployment pipelines. Based on all available intelligence and our internal assessments, we have found no evidence of compromise, malicious packages, or suspicious activity within our environment. We will provide additional updates if new information becomes available. Media View all Dive into DataDome's Dashboard Opens in new tab DataDome’s dashboard simplifies your user experience with visually impactful and intuitive displays. You can see your overall threat landscape, drill into specific threats for detailed insights, and generate automated reports. SoundCloud customer story Opens in new tab Since 2007, SoundCloud has empowered artists to build and grow their careers by providing them with the most progressive tools, services, and resources. To keep the platform free from fraudulent traffic, SoundCloud teamed up with AWS and DataDome. By eliminating fake account creation, spam comments, automated plays, and other types of unwanted activity, the multilayered protection keeps user interactions safe and ensures that SoundCloud’s business decisions are based on reliable KPIs. How Leboncoin Blocks Millions of Malicious Requests Every Day Opens in new tab Leboncoin, France’s leading classified marketplace, is central to how people in France buy, sell, rent, and connect. Before turning to DataDome, the platform was facing rampant scraping used to steal user ads and data, posting them to third‑party sites without permission. Building sufficient in‑house defenses would have been a massive, expensive effort. By partnering with DataDome, Leboncoin was able to deploy bot and scraping protection across its website and mobile apps in a matter of days, not weeks. The company now blocks millions of malicious requests daily, saving significant time, thanks to AI-driven protection that evolves as quickly as attackers.