Third Party Index

Fathom

fathom.ai

Certifications and attestations: SOC 2 Type II

Says it complies with: HIPAA, GDPR, CCPA/CPRA

As listed on Fathom's trust center (evidence) ; reports themselves are usually shared on request.

Transparency

Strong

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust center8 / 8
Privacy policy6 / 6
security.txtnot found0 / 6
Security pagenot found0 / 5
Status page5 / 5
Vulnerability disclosurenot found0 / 5
Pages still reachable8 / 8
Total84 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Fathom transparency rating

For Fathom's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/fathom"><img src="https://thirdpartyindex.com/badge/fathom.svg" alt="Fathom transparency rating on Third Party Index" height="20"></a>
[![Fathom transparency rating on Third Party Index](https://thirdpartyindex.com/badge/fathom.svg)](https://thirdpartyindex.com/vendors/fathom)

Documents

DocumentVerifiedChangedEvidence
Trust center vanta snapshot
Subprocessor list vanta snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Status page statuspage snapshot

Subprocessors

30 third parties. CSV · Atom

NamePurposeLocationListed since
Amplitude Data analyticsUSA
Anthropic AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer DataUSA
Brandfetch Brand & Logo APIUSA
Census Data Analytics & ETLUSA
ChartMogul Data analyticsUSA
Cloudflare CDNUSA
Courier Email ProviderUSA
Elastic Search Provider; 🔒 Handles Meeting Content DataUSA
ElevenLabs AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer DataUSA
Fireworks AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer DataUSA
FiveTran Data Analytics & ETLUSA
Front Helpdesk ProviderUSA
Google Cloud Platform Primary Cloud Provider; 🔒 Handles Meeting Content Data (Recording, Transcript) 🤖 Forbidden from training AI on Fathom Customer DataUSA
Hex Data analyticsUSA
HubSpot CRMUSA
Modal AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer DataUSA
New Relic Application MonitoringUSA
omni Business intelligence and analytics; Data analyticsUSA
OpenAI AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer DataUSA
Postmark Email ProviderUSA
Pusher In-App CommunicationUSA
Retool Data Analytics & ETLUSA
Reveal Partnership Marketing PlatformBelgium
RevenueHero SalesUSA
Sentry Application MonitoringUSA
Sphere Finance and paymentsUSA
Stripe Payment ProcessorUSA
UserVoice Feedback Tracking PlatformUSA
Voyage AI AI Provider; 🔒 Handles Meeting Content Data 🤖 Forbidden from training AI on Fathom Customer DataUSA
Warmly SalesUSA

Listed as a subprocessor by (6)

Purposes as each company states them.

Service status

3 incidents in the last 45 days (1 major or critical, 1 minor, 1 with no stated impact) · typically resolved in 6 h 55 min · longest major: 1 h 35 min

BeganIncidentImpactLasted
Some calls slow to start and processnone6 h 55 min evidence
GCP incident impacting application connectivity and performancemajor1 h 35 min evidence
List meetings endpoint returns an error when the calendar_invitees_domains parameter is providedminor40 h 52 min evidence

As Fathom's status page reports its own incidents (scheduled maintenance left out), read every few hours since .

Changes

None since tracking began.