Apollo
Certifications and attestations: SOC 2ISO/IEC 27001CASA
Says it complies with: GDPR, CCPA/CPRA, Data Privacy Framework
As listed on Apollo's trust center (evidence) ; reports themselves are usually shared on request.
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | partial | 0 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | unreachable | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | some unreachable this week | 0 / 8 |
| Total | 64 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Apollo's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/apollo"><img src="https://thirdpartyindex.com/badge/apollo.svg" alt="Apollo transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/apollo)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center safebase | snapshot | ||
| Subprocessor list safebase | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Status page failing | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Anthropic | United States | ||
| AssemblyAI | United States | ||
| Astronomer | United States | ||
| Baseten | United States | ||
| Cloudflare | United States | ||
| Databricks | United States | ||
| Datadog | United States | ||
| dbt Labs | United States | ||
| Exa | United States | ||
| Fullview | United States | ||
| LangChain | United States | ||
| NetNut Ltd. | United States | ||
| Nylas | United States | ||
| OpenAI | United States | ||
| Panther Labs, Inc. | United States | ||
| Perplexity AI | United States | ||
| Quarterzip | United States | ||
| Recall.ai | United States | ||
| Snowflake | United States | ||
| Team Mailpool | United States | ||
| Twilio | United States |
Listed as a subprocessor by (10)
Purposes as each company states them.
Ahrefs ahrefs.com Sales intelligence and engagement
Fillout fillout.com
Massed Compute massedcompute.com Sales intelligence and outbound sales prospecting
Metabase metabase.com Enrichment of customer data.
Redis redis.io Lead generation
Superside superside.com
Thinkific thinkific.com Provides GraphQL hosting for the Thinkific platform
Unbounce unbounce.com
ngrok ngrok.com Marketing Automation
nylas nylas.com Lead Generation
Security record
What public security catalogs list for Apollo, in their words.
Data breaches
- Apollo 125,929,660 accounts Email addresses; Employers; Geographic locations; Job titles; Names; Phone numbers; Salutations; Social media profiles
In July 2018, the sales engagement startup Apollo left a database containing billions of data points publicly exposed without a password. The data was discovered by security researcher Vinny Troia who subsequently sent a subset of the data containing 126 million unique email addresses to Have I Been Pwned. The data left exposed by Apollo was used in their "revenue acceleration platform" and included personal information such as names and email addresses as well as professional information including places of employment, the roles people hold and where they're located. Apollo stressed that the exposed data did not include sensitive information such as passwords, social security numbers or financial data. The Apollo website has a contact form for those looking to get in touch with the organisation.
Have I Been Pwned · evidence
Breach data from Have I Been Pwned (CC BY 4.0), which calls every entry a breach, including data scraped from public pages.
Changes
None since tracking began.