{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"clay","name":"Clay","domain":"clay.com","category":"Sales tools","one_liner":"Infrastructure to get any data, run agentic workflows, and launch GTM","trust_center_url":"https://trust.clay.com/","security_page_url":null,"url":"https://certreports.com/vendors/clay/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 19 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/clay/soc-2","evidence":[{"source_type":"trust_center","source_name":"Clay trust centre (Vanta)","url":"https://trust.clay.com/","fetched_at":"2026-09-19 07:33:31.814577+00","content_hash":"2866d244999097ca2252952326ebb44d883fc98da5bb6882db8b6760cf51b0f0","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/clay/gdpr","evidence":[{"source_type":"trust_center","source_name":"Clay trust centre (Vanta)","url":"https://trust.clay.com/","fetched_at":"2026-09-19 07:33:31.814577+00","content_hash":"2866d244999097ca2252952326ebb44d883fc98da5bb6882db8b6760cf51b0f0","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/clay/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Clay trust centre (Vanta)","url":"https://trust.clay.com/","fetched_at":"2026-09-19 07:33:31.814577+00","content_hash":"2866d244999097ca2252952326ebb44d883fc98da5bb6882db8b6760cf51b0f0","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states ISO 42001:2023 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/clay/iso-42001","evidence":[{"source_type":"trust_center","source_name":"Clay trust centre (Vanta)","url":"https://trust.clay.com/","fetched_at":"2026-09-19 07:33:31.814577+00","content_hash":"2866d244999097ca2252952326ebb44d883fc98da5bb6882db8b6760cf51b0f0","wayback_url":null,"quote":"ISO 42001:2023","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/clay/security","evidence":[{"source_type":"trust_center","source_name":"Clay trust centre (Vanta)","url":"https://trust.clay.com/","fetched_at":"2026-09-19 07:33:31.814577+00","content_hash":"2866d244999097ca2252952326ebb44d883fc98da5bb6882db8b6760cf51b0f0","wayback_url":null,"quote":"CCPA","confidence":1}]}],"brief":{"summary":"According to Clay's trust centre, as of 19 Sep 2026, the company has a SOC 2 Type II report on file. Clay's trust centre also states, as of 19 Sep 2026, that the company meets GDPR requirements. As of 19 Sep 2026, Clay states on its trust centre that it holds ISO/IEC 27001:2022. Clay states on its trust centre, as of 19 Sep 2026, that it holds ISO/IEC 42001:2023. Clay's trust centre further states, as of 19 Sep 2026, that the company meets CCPA/CPRA requirements.","bullets":["SOC 2 Type II report: vendor states on trust centre, as of 19 Sep 2026","ISO/IEC 27001:2022 and ISO/IEC 42001:2023: vendor states on trust centre, as of 19 Sep 2026","GDPR and CCPA/CPRA: vendor states on trust centre, as of 19 Sep 2026"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 10:38:09.911487+00"},"legal_docs":[{"kind":"privacy","url":"https://privacy.clay.com","availability":"public","detail":null,"as_of":"2026-09-19"},{"kind":"subprocessors","url":"https://trust.clay.com/","availability":"public","detail":"34 subprocessors listed on the trust centre","as_of":"2026-09-19"}],"subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud provider","location":"USA","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Amplitude","domain":"amplitude.com","purpose":"Data analytics","location":"USA","vendor_url":"https://certreports.com/vendors/amplitude/security"},{"name":"Anthropic","domain":"anthropic.com","purpose":"LLM provider/hosting","location":"USA","vendor_url":"https://certreports.com/vendors/anthropic/security"},{"name":"Braintrust","domain":"braintrust.dev","purpose":"LLM Operations","location":"USA","vendor_url":null},{"name":"Browserbase","domain":"browserbase.com","purpose":"LLM Operations","location":"USA","vendor_url":null},{"name":"ClickHouse","domain":"clickhouse.com","purpose":"Database","location":"USA","vendor_url":null},{"name":"Cohere","domain":"cohere.com","purpose":"LLM operations","location":"Canada","vendor_url":"https://certreports.com/vendors/cohere/security"},{"name":"Cube Dev","domain":"cube.dev","purpose":"Data analytics","location":"USA","vendor_url":null},{"name":"Datadog","domain":"datadoghq.com","purpose":"APM and security","location":"USA","vendor_url":"https://certreports.com/vendors/datadog/security"},{"name":"Fireworks","domain":"fireworks.ai","purpose":"LLM provider/hosting","location":"USA","vendor_url":"https://certreports.com/vendors/fireworks-ai/security"},{"name":"Fivetran","domain":"fivetran.com","purpose":"Data ETL","location":"USA","vendor_url":"https://certreports.com/vendors/fivetran/security"},{"name":"Google Gemini","domain":"google.com","purpose":"LLM provider/hosting","location":"USA","vendor_url":"https://certreports.com/vendors/google/security"},{"name":"Grafana","domain":"grafana.com","purpose":"Logging and metrics","location":"USA","vendor_url":"https://certreports.com/vendors/grafana-labs/security"},{"name":"Intercom","domain":"intercom.com","purpose":"Customer support","location":"USA","vendor_url":"https://certreports.com/vendors/intercom/security"},{"name":"Langsmith","domain":"langchain.com","purpose":"LLM logging and tracing","location":"USA","vendor_url":"https://certreports.com/vendors/langchain/security"},{"name":"Mezmo","domain":"mezmo.com","purpose":"Logging and metrics","location":"USA","vendor_url":"https://certreports.com/vendors/mezmo/security"},{"name":"Mistral","domain":"mistral.ai","purpose":"LLM provider/hosting","location":"France","vendor_url":"https://certreports.com/vendors/mistral-ai/security"},{"name":"OpenAI","domain":"openai.com","purpose":"LLM provider/hosting","location":"USA","vendor_url":"https://certreports.com/vendors/openai/security"},{"name":"Parallel Web Systems","domain":"parallel.ai","purpose":"LLM operations","location":"USA","vendor_url":null},{"name":"Planetscale","domain":"planetscale.com","purpose":null,"location":"USA","vendor_url":"https://certreports.com/vendors/planetscale/security"},{"name":"Postmark","domain":"postmarkapp.com","purpose":"Email service provider","location":"USA","vendor_url":"https://certreports.com/vendors/postmark/security"},{"name":"Raindrop.ai","domain":"raindrop.ai","purpose":"LLM operations","location":"USA","vendor_url":"https://certreports.com/vendors/raindrop/security"},{"name":"Segment","domain":"segment.com","purpose":"Data analytics","location":"USA","vendor_url":"https://certreports.com/vendors/segment/security"},{"name":"Sentry","domain":"sentry.io","purpose":"Error logging","location":"USA","vendor_url":"https://certreports.com/vendors/sentry/security"},{"name":"SerpApi","domain":"serpapi.com","purpose":"LLM operations","location":"USA","vendor_url":null},{"name":"Serper","domain":"serper.dev","purpose":"LLM operations","location":"USA","vendor_url":null},{"name":"Slack","domain":"slack.com","purpose":"Customer Support","location":"USA","vendor_url":"https://certreports.com/vendors/slack-technologies/security"},{"name":"Smartlead","domain":"smartlead.ai","purpose":"Email sequencer","location":"USA","vendor_url":null},{"name":"Snowflake","domain":"snowflake.com","purpose":"Data analytics","location":"USA","vendor_url":"https://certreports.com/vendors/snowflake/security"},{"name":"Turbopuffer","domain":"turbopuffer.com","purpose":"Vector Database","location":"USA","vendor_url":null},{"name":"Verisoul","domain":"verisoul.ai","purpose":"Fraud Detection","location":"USA","vendor_url":null},{"name":"WorkOS","domain":"workos.com","purpose":"Authentication support","location":"USA","vendor_url":null},{"name":"Zapier","domain":"zapier.com","purpose":"Data imports","location":"USA","vendor_url":"https://certreports.com/vendors/zapier/security"},{"name":"Zenrows","domain":"zenrows.com","purpose":"LLM operations","location":"Spain","vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T11:57:33.226Z"}