{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"partnerstack","name":"PartnerStack","domain":"partnerstack.com","category":"Sales tools","one_liner":"PartnerStack is a full stack solution for partnerships.","trust_center_url":"https://trust.partnerstack.com/","security_page_url":null,"url":"https://certreports.com/vendors/partnerstack/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 21 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/partnerstack/soc-2","evidence":[{"source_type":"trust_center","source_name":"PartnerStack trust centre (Vanta)","url":"https://trust.partnerstack.com/","fetched_at":"2026-09-21 22:47:26.927996+00","content_hash":"dde249e7bbf081906ed83a161f9481ca7035f52118ba62181b51f58157b4afe2","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1},{"source_type":"trust_center","source_name":"PartnerStack trust centre (Vanta)","url":"https://trust.partnerstack.com/","fetched_at":"2026-09-18 23:10:02.103683+00","content_hash":"6e21d45a10a10be217e80fec912dd10c961eeb03889a90ec0ed60feb5b214f5e","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 21 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/partnerstack/gdpr","evidence":[{"source_type":"trust_center","source_name":"PartnerStack trust centre (Vanta)","url":"https://trust.partnerstack.com/","fetched_at":"2026-09-21 22:47:26.927996+00","content_hash":"dde249e7bbf081906ed83a161f9481ca7035f52118ba62181b51f58157b4afe2","wayback_url":null,"quote":"GDPR","confidence":1},{"source_type":"trust_center","source_name":"PartnerStack trust centre (Vanta)","url":"https://trust.partnerstack.com/","fetched_at":"2026-09-18 23:10:02.103683+00","content_hash":"6e21d45a10a10be217e80fec912dd10c961eeb03889a90ec0ed60feb5b214f5e","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2018-09-26","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/partnerstack/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/1578","fetched_at":"2026-11-02 05:00:40.232395+00","content_hash":"ae706452435c13e00eea0bcd0719e7bb3c179cfd31f3ec5783b4d05169eae0c8","wayback_url":null,"quote":"PartnerStack inc.: Inactive","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Vanta) as of 21 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/partnerstack/security","evidence":[{"source_type":"trust_center","source_name":"PartnerStack trust centre (Vanta)","url":"https://trust.partnerstack.com/","fetched_at":"2026-09-21 22:47:26.927996+00","content_hash":"dde249e7bbf081906ed83a161f9481ca7035f52118ba62181b51f58157b4afe2","wayback_url":null,"quote":"CCPA","confidence":1},{"source_type":"trust_center","source_name":"PartnerStack trust centre (Vanta)","url":"https://trust.partnerstack.com/","fetched_at":"2026-09-18 23:10:02.103683+00","content_hash":"6e21d45a10a10be217e80fec912dd10c961eeb03889a90ec0ed60feb5b214f5e","wayback_url":null,"quote":"CCPA","confidence":1}]}],"brief":null,"legal_docs":[{"kind":"subprocessors","url":"https://trust.partnerstack.com/","availability":"public","detail":"17 subprocessors listed on the trust centre","as_of":"2026-09-21"},{"kind":"privacy","url":"https://partnerstack.com/legal","availability":"public","detail":null,"as_of":"2026-09-21"}],"documents":[{"type":"business_continuity","title":"Business Continuity and Disaster Recovery Plan","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"},{"type":"incident_response","title":"Incident Response Policy","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"},{"type":"pentest_report","title":"2023 - PartnerStack Penetration Test Report","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"},{"type":"pentest_report","title":"2024 - PartnerStack Penetration Testing Final Report","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"},{"type":"pentest_report","title":"2025 - PartnerStack Penetration Test Report","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Information Security Policy (AUP)","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"},{"type":"soc2_report","title":"2025 - PartnerStack SOC 2 Type 2","availability":"on_request","source_url":"https://trust.partnerstack.com/","last_seen":"2026-09-21"}],"statements":[{"topic":"data_location","question":"Where is data stored?","answer":"We store our data in GCP within the United States","value":null,"regions":["US"],"source_url":"https://trust.partnerstack.com/faq?s=epkesobmis4lzrgldbi1mj","as_of":"2026-09-21"},{"topic":"data_transfers","question":"Is data transferred across borders?","answer":"PartnerStack stores data in the United States using Google Cloud platform. For purposes of international transfer, PartnerStack engages in a data protection addendum outlining various data controls and standards for data imported or exported into the United States from international countries.","value":null,"regions":["US"],"source_url":"https://trust.partnerstack.com/faq?s=xupy8bizf2yd5a0tuwc3","as_of":"2026-09-21"},{"topic":"encryption","question":"Is data encrypted at rest, and if yes, what cipher is used?","answer":"Data stored by PartnerStack is encrypted at rest using AES-256.","value":null,"regions":[],"source_url":"https://trust.partnerstack.com/faq?s=d1rv9426kgt3pifrmd0r","as_of":"2026-09-21"}],"security_profile":{"iso42001":null,"trains_on_customer_data":null,"data_residency_regions":["US"],"pen_test_cadence":"annual","as_of":"2026-09-21"},"regulations_url":"https://certreports.com/api/v1/vendors/partnerstack/regulations/{regulation}","subprocessors":[{"name":"Ada Inc.","domain":"ada.cx","purpose":"Support Chat","location":"United States ","vendor_url":null},{"name":"Airwallex US LLC","domain":"airwallex.com","purpose":"Payment Services","location":"United States","vendor_url":"https://certreports.com/vendors/airwallex-us/security"},{"name":"Branch.io","domain":"branch.io","purpose":"Device Attribution","location":"United States","vendor_url":"https://certreports.com/vendors/branch-metrics/security"},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"Networking and Security","location":"United States","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Google Cloud Platform","domain":"google.com","purpose":"Platform Infrastructure","location":"United States","vendor_url":"https://certreports.com/vendors/google/security"},{"name":"Looker","domain":"google.com","purpose":"Data Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/google/security"},{"name":"MaxMind Inc.","domain":"maxmind.com","purpose":"Fraud Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/maxmind/security"},{"name":"Metabase Cloud","domain":"metabase.com","purpose":"Data Analytics ","location":"United States ","vendor_url":null},{"name":"PayPal Inc.","domain":"paypal.com","purpose":"Payment Processor","location":"United States ","vendor_url":"https://certreports.com/vendors/paypal/security"},{"name":"Pendo.io Inc","domain":"pendo.io","purpose":"Product Analytics","location":"United States ","vendor_url":"https://certreports.com/vendors/pendo/security"},{"name":"Segment Inc.","domain":"segment.com","purpose":"Data Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/segment/security"},{"name":"SendGrid Inc.","domain":"sendgrid.com","purpose":"Transactional Email","location":"United States","vendor_url":"https://certreports.com/vendors/sendgrid/security"},{"name":"Sift Sciences","domain":"sift.com","purpose":"Fraud Analytics","location":"United States ","vendor_url":"https://certreports.com/vendors/sift/security"},{"name":"Stripe Inc.","domain":"stripe.com","purpose":"Payment Processor ","location":"United States","vendor_url":"https://certreports.com/vendors/stripe/security"},{"name":"StructuredWeb","domain":"structuredweb.com","purpose":"Co-Marketing","location":"United States ","vendor_url":null},{"name":"Workato Inc.","domain":"workato.com","purpose":"iPaaS","location":"United States ","vendor_url":null},{"name":"Zendesk Inc.","domain":"zendesk.com","purpose":"Support Service Desk","location":"United States ","vendor_url":"https://certreports.com/vendors/zendesk/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:20:19.021Z"}