# Pipeline CRM

Pipeline CRM (pipelinecrm.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/pipeline-crm
- Documents last verified: 2026-10-03
- Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 19 tracked vendors directly, 142 within two hops, 393 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Pipeline CRM, Third Party Index, https://thirdpartyindex.com/vendors/pipeline-crm (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.pipelinecrm.com/ | 2026-10-03 | 2026-10-03 |
| Subprocessor list | https://trust.pipelinecrm.com/subprocessors | 2026-10-03 | 2026-10-03 |
| Privacy policy | https://pipelinecrm.com/privacy-policy/ | 2026-10-03 | 2026-10-03 |
| Terms | https://pipelinecrm.com/terms/ | 2026-10-03 | 2026-10-03 |
| Security page | https://pipelinecrm.com/security/ | 2026-10-03 | 2026-10-03 |
| Status page | https://status.pipelinecrm.com/ | 2026-10-03 | 2026-10-03 |

## Subprocessors (21)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure, compute, storage, database, networking, and managed services for production environment; Cloud provider | United States | 2026-10-03 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI; Large language model provider for Pipeline Copilot and in-app AI features. Not used for training. Retention: deleted within 30 days, except content flagged for misuse, which may be retained longer under Anthropic's Usage Policy. Transfer basis: Anthropic Data Processing Addendum with Standard Contractual Clauses. | United States | 2026-10-03 |
| API Layer | Data validation; Email address verification | Global | 2026-10-03 |
| [ChurnZero](https://thirdpartyindex.com/vendors/churnzero.md) | Customer success; Customer success and churn management platform | United States | 2026-10-03 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | CDN, DNS, DDoS protection, WAF, and network security services; Cloud security | Global | 2026-10-03 |
| [Customer.io](https://thirdpartyindex.com/vendors/customer-io.md) | Messaging; Product and lifecycle messaging to customers' users | United States | 2026-10-03 |
| [FullContact](https://thirdpartyindex.com/vendors/fullcontact.md) | Contact data enrichment and identity resolution API; Data enrichment | United States | 2026-10-03 |
| Google Maps Platform | Geolocation; Maps rendering and place/address lookup | United States | 2026-10-03 |
| [Groq](https://thirdpartyindex.com/vendors/groq.md) (AI model provider: Groq) | AI; Speech-to-text transcription of Pipeline Phone call recordings, when enabled by an account administrator. Not used for training. Retention: not retained (zero data retention). Transfer basis: Groq Data Processing Addendum with Standard Contractual Clauses. | United States and other regions | 2026-10-03 |
| [Ipregistry](https://thirdpartyindex.com/vendors/ipregistry.md) | IP address geolocation lookup for sign-in security; Security | Global | 2026-10-03 |
| [LocationIQ](https://thirdpartyindex.com/vendors/locationiq.md) | Geocoding, reverse geocoding, and mapping API service; Geolocation | United States | 2026-10-03 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Email; Transactional email delivery and API service | United States | 2026-10-03 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | Analytics; Product analytics and user behavior tracking platform | United States | 2026-10-03 |
| [New Relic](https://thirdpartyindex.com/vendors/new-relic.md) | Application performance monitoring, infrastructure observability, and log management; Monitoring | United States | 2026-10-03 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI; Large language model provider for Pipeline Copilot (via OpenRouter) and AI writing features. Not used for training. Retention: up to 30 days for abuse monitoring. | United States | 2026-10-03 |
| [OpenRouter](https://thirdpartyindex.com/vendors/openrouter.md) (AI model provider: OpenRouter) | AI; Routes Copilot requests to OpenAI. Not used for training; routing to providers that train on data is disabled. Retention: prompts and responses are not stored; request metadata is stored. Transfer basis: OpenRouter Data Processing Agreement. | United States | 2026-10-03 |
| [Plain](https://thirdpartyindex.com/vendors/plain.md) | Customer support; Customer support ticketing and in-app support chat | United Kingdom | 2026-10-03 |
| [Pusher](https://thirdpartyindex.com/vendors/pusher.md) | Communications; Real-time in-app updates (Channels) and push notifications (Beams) | United States | 2026-10-03 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Application error tracking and performance monitoring; Monitoring | United States | 2026-10-03 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payments; Subscription billing and payment processing | United States | 2026-10-03 |
| [Twilio](https://thirdpartyindex.com/vendors/twilio.md) | Communications; Voice calling, call recording and SMS for Pipeline Phone | United States | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/40087)). CSV: https://thirdpartyindex.com/vendors/pipeline-crm/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 4. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/40100))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/40100))

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- Status page last read: 2026-10-04
- No incidents reported in the last 12 months
- Latest incident reported: 2023-04-17: Service Interruption (major)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api