Snapshot 893

Document
Trust center
URL
https://trustcenter.hootsuite.com/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
381633 bytes
SHA-256 (raw)
a7b771d65f929be89f8532b193e6637f8e0c6fa7a0e84a15fea5ddbc1eb1465a
SHA-256 (normalized text)
e4ec6ac7409de400a9f849e4e5c86088b3d9733713665bd0b888980076ef9eb6

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Hootsuite
Search the Trust Center...
Ctrl +K
Quick links
Hootsuite.com
Report a Vulnerability
ISO 27001 Certificate
Quick links
Hootsuite.com
Report a Vulnerability
ISO 27001 Certificate
Our Philosophy
Welcome to Hootsuite’s Trust Center!
This is a centralized hub for all things related to security, privacy, compliance at Hootsuite. We want to make it easier for you to access the information you need to feel confident in how we protect your data and maintain compliance with global standards.
Our approach to security and data privacy is built on industry best practices and is supported by a comprehensive set of internal controls, risk management processes, and ongoing assessments. To provide independent assurance of our security and privacy practices, we maintain multiple globally recognized certifications and undergo regular third-party audits — including SOC 2 Type II audits, ISO certifications (27001, 27017, 27018, and 27701), FedRAMP Authorization, and UK Cyber Essentials.
To stay informed of updates to our security and privacy program, please click on the subscribe button at the top of this page.
Announcements
Nov 29, 2025, 13:55 UTC
Hootsuite update on Salesforce Gainsight breach
Hootsuite was recently made aware of a security incident involving Salesforce/Gainsight which resulted in the compromise of authentication tokens for a subset of Gainsight customers.
Upon notification, Hootsuite’s Security Team immediately revoked the affected integration token and launched a forensic investigation. Our review of system and access logs confirmed that although an unauthorized party attempted initial connectivity checks, no customer data, proprietary information, or sensitive records were accessed or exfiltrated.
We have completed all necessary credential rotations and verified the integrity of our system. No action is required from Hootsuite customers at this time.
If you have any questions, please reach out to security@hootsuite.com.
Sep 27, 2025, 12:55 UTC
Advisory: Fake GitHub Repositories Posing as Trusted Sources
Hootsuite has identified a phishing campaign that uses fake GitHub repositories and Search Engine Optimization (SEO) manipulation to target macOS users and entice them to download malware.
This activity is not the result of any compromise of Hootsuite systems, it arises from the fraudulent use of the Hootsuite name. Hootsuite is actively reporting these malicious repositories to GitHub and continues to monitor for similar threats.
Users are advised to avoid interacting with or downloading content from unverified third-party links. Suspicious communications claiming to be from Hootsuite can be forwarded to security@hootsuite.com for verification.
Sep 17, 2025, 12:55 UTC
Hootsuite update on Salesforce-Drift breach
Hootsuite was made aware of the Salesloft Drift breach which resulted in attackers stealing authentication tokens, and Salesforce data from certain Salesloft's customers. Following a thorough security review, Hootsuite determined that our systems, data, and customers are not affected by this incident.
For any further questions, please reach out to security@hootsuite.com.
Compliance
CCPA
CSA STAR 1
FedRAMP Li-SaaS
GDPR
PCI
Trusted by
Quick Summary
One or more annual third-party audit(s)
Annual third-party penetration testing
Has a disaster recovery plan
Subprocessors list available
Has cyber insurance
Will enter into a DPA
Has a bug bounty or vulnerability disclosure program
Deletes customer data on request
Uses a centralized IAM solution (SSO) to manage employee access
Has a status page
Has a privacy policy
Documents & Knowledge Base FAQs
Featured Documents
Powered by Conveyor, the first end-to-end customer trust platform.
Learn more