8x8
Certifications and attestations: SOC 2ISO/IEC 27001ISO/IEC 27017ISO/IEC 27018ISO 9001PCI DSSCSA STARCyber Essentials Plus
Says it complies with: GDPR
As listed on 8x8's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | not found | 0 / 6 |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 66 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For 8x8's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/8x8"><img src="https://thirdpartyindex.com/badge/8x8.svg" alt="8x8 transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/8x8)Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Status page | snapshot |
Subprocessors
25 third parties, 1 affiliate. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Alchemer LLC | CPAAS; End user surveys [User does not have to respond to surveys and then the sub processor will not be used.] | USA | |
| Amazon Web Services, Inc | All data processed in 8x8 microservices, including long term call and screen recording storage.; Cloud Service Provider | USA, Canada, Brazil, UK, EU, Singapore, Australia | |
| Amplitude, Inc. | Software Provider [as a Service Provider] | USA | |
| Anthropic | AI Studio AI Model Provider; One of the underlying AI models for AI Studio | USA | |
| Calabrio (Teleopti) | Software Provider [as a Service Provider]; User stats [This sub processor is only used if WFM is ordered] | USA, EU, China | |
| Cloudflare | AI Studio Cloud Infrastructure; Content delivery network (CDN) and network/application security provider. | USA | |
| Cognigy GmbH | ICA: Intelligent Customer Assistant. Automated chatbots and flows [This sub processor is only used when a customer purchases the ICA service]; Software Provider [as a Service Provider] | EU | |
| Creovai | AI-powered software suite that provides real-time agent guidance and post-conversation analytics to contact center teams, aiming to improve customer and agent experiences.; Software Provider [as a Service Provider] | USA, Europe, Latin America | |
| Cronofy Limited | Software Provider [as a Service Provider]; User Calendars \-[This sub processor is only used if an end user deliberately selects “calendar sync” inside the 8x8 Work App, and confirms they wish to share data with Cronofy] | USA, EU | |
| Deepgram | AI Studio Voice and Telephony; Speech-to-text (ASR) and voice-intelligence provider. | USA | |
| Descope | CPAAS; For CPAAS users only, Login/Email and password stored and processed in the US. For MFA the user’s mobile number also stored. | USA | |
| Dstny (Qunifi Limited) | Microsoft Teams media integration [This sub processor is only used if MS Teams integration is used]; Software Provider [as a Service Provider] | USA, UK, Australia | |
| ElevenLabs | AI Studio AI Model Provider; One of the underlying AI models for AI Studio | USA | |
| AI Studio AI Model Provider; Natural Language Processing (sold as Virtual Agent), client UI stats (Data where 8x8 is a Controller). Google’s Cloud Platform (GCP) is also used to host the CPaas messaging; One of the underlying AI models for AI Studio; Software Provider [as a Service Provider] | USA | ||
| Inference (part of Five9) | Any PII passed on media in IVR. Biometrics processing is performed in Amazon Web Services in Europe (Ireland). NOTE: You can turn off utterance storage in Node Settings. [This sub processor is only used if Intelligent IVR is ordered]; Software Provider [as a Service Provider] | USA | |
| Microsoft Power BI | CPAAS | USA | |
| Movate | Outsourced service for 8x8's global tier 1 technical support; Support Service Provider | Costa Rica | |
| OpenAI | AI Studio AI Model Provider; One of the underlying AI models for AI Studio | USA | |
| Oracle America, Inc. (Oracle Cloud Infrastructure) | Cloud Service Provider; Full stack deployments in various regions, including data processor storage in the same region as the customer is deployed. | USA, Canada, Brazil, UK, EU, India, Australia | |
| PCIPAL | PCI Card data [This sub processor is only used if Securepay is ordered]; Software Provider [as a Service Provider] | USA, UK | |
| SpaceXAI | AI Studio AI Model Provider; One of the underlying AI models for AI Studio | USA | |
| SpinSci | EHR integrations to products such as Epic and Athena | Software Provider [as a Service Provider] | |
| Sutherland Global Services | Outsourced service for 8x8's global tier 1 support; Support Service Provider | Philippines | |
| Verint | Verint® Monet Workforce Management is an affordable, easy-to-use contact center software solution that optimizes employee forecasting and scheduling. It can free you from the limitations of scheduling spreadsheets and help you tackle the two biggest contact center challenges: meeting service levels and controlling costs. | Software Provider [as a Service Provider] | |
| Voximplant | AI Studio Voice and Telephony; Voice/CPaaS and voice-AI orchestration infrastructure. | USA |
Federal contracts
By funding agency. UEI MEJNRFRH8567 · checked Sep 27, 2026 · snapshot failing
| Agency | Prime awards | Obligated | Subawards | Subaward total | Years |
|---|---|---|---|---|---|
| International Boundary and Water Commission: U.S.-Mexico Department of State | 13 | $1.2M | — | — | 2012–2026 |
| Department of the Army Department of Defense | 2 | $16.9K | — | — | 2007–2018 |
| Department of the Navy Department of Defense | 2 | $10.3K | — | — | 2019–2021 |
| Drug Enforcement Administration Department of Justice | 2 | $7.6K | — | — | 2009–2011 |
| Office of the Under Secretary for Management Department of Homeland Security | 1 | $7.3K | — | — | 2017–2022 |
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
Changes
None since tracking began.