8x8

Security and trust center evidence

8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere

8x8.com Communications and CPaaSLast verified 2 Nov 2026

Request the report Are you 8x8?

SOC 2Vendor-stated

GDPRVendor-stated

PCI DSSVendor-stated

ISO 27001Vendor-stated

CSA STARVerified

ISO 27017Vendor-stated

ISO 27018Vendor-stated

ISO 9001Vendor-stated

DPFVerified

NHS DSPTVendor-stated

8x8 has 2 registry-verified rows and 8 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

8x8 states on its trust centre that it holds SOC 2, as of 18 Sep 2026. 8x8 states on its trust centre that it holds ISO/IEC 27001:2022, as of 18 Sep 2026. 8x8 states on its trust centre that it holds PCI DSS at the SAQ D, Merchant level, as of 18 Sep 2026. 8x8 is listed in CSA STAR with a Level 1 self-assessment (CAIQ) issued 4 Jul 2018, as of 17 Sep 2026. 8x8 is listed in the EU-US Data Privacy Framework registry as active across the EU-US, SW-US and UK Extension certifications, issued 14 Nov 2016 and expiring 28 Jan 2027, as of 17 Sep 2026.

SOC 2: vendor-stated on trust centre, no report type or date specified (as of 18 Sep 2026)
CSA STAR: Level 1 self-assessment (CAIQ), issued 4 Jul 2018 (as of 17 Sep 2026)
EU-US Data Privacy Framework: active listing across EU-US, SW-US and UK Extension certifications, expires 28 Jan 2027 (as of 17 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among communications and cpaas vendors

2verified rows

Category median 1, across 45 indexed communications and cpaas vendors. 8x8 has more verified rows than 80 percent of them.

business-phonecloud-communicationsunified-communicationsvoip

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Public trust centre documents

Public · 8x8 Cyber Essentials Plus 2026-2027; 8x8 ISO 14001 2023-2026; 8x8 ISO 27001 2025-2027; 8x8 ISO 27017 2025-2027; 8x8 ISO 27018 2025-2027; 8x8 SOC3 Certificate 2025 · as of 18 Sep 2026

Open

Public · as of 30 Sep 2026

Open

Standard contractual clauses

On request · Listed on the trust centre as "8x8 Transfer Impact Assessment INDIA (Final 12-31-26)" · as of 30 Sep 2026

Open

Subprocessor list

Public · 27 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Data processing agreement

On request · Listed on the trust centre as "Global Data Processing Addendum (2026-08-04)" · as of 30 Sep 2026

Open

Subprocessors (26)

8x8 Group Companies8x8.com
Alchemer LLCCPAAS · USA
Amazon Web Services, IncCloud Service Provider · USA, Canada, Brazil, UK, EU, Singapore, Australia
Amplitude, Inc.Software Provider [as a Service Provider] · USA
AnthropicAI Studio AI Model Provider · USA
Calabrio (Teleopti)Software Provider [as a Service Provider] · USA, EU, China
CloudflareAI Studio Cloud Infrastructure · USA
CG
Cognigy GmbHSoftware Provider [as a Service Provider] · EU
CR
CreovaiSoftware Provider [as a Service Provider] · USA, Europe, Latin America
Cronofy LimitedSoftware Provider [as a Service Provider] · USA, EU
DE
DeepgramAI Studio Voice and Telephony · USA
DE
DescopeCPAAS · USA
DQ
Dstny (Qunifi Limited)Software Provider [as a Service Provider] · USA, UK, Australia
ElevenLabsAI Studio AI Model Provider · USA
GoogleAI Studio AI Model Provider · USA
Inference (part of Five9)Software Provider [as a Service Provider] · USA
Microsoft Power BICPAAS · USA
MO
MovateSupport Service Provider · Costa Rica
OpenAIAI Studio AI Model Provider · USA
Oracle America, Inc. (Oracle Cloud Infrastructure)Cloud Service Provider · USA, Canada, Brazil, UK, EU, India, Australia
PCIPALSoftware Provider [as a Service Provider] · USA, UK
SpaceXAIAI Studio AI Model Provider · USA
SP
SpinSciSoftware Provider [as a Service Provider]
SG
Sutherland Global ServicesSupport Service Provider · Philippines
VerintSoftware Provider [as a Service Provider]
VoximplantAI Studio Voice and Telephony · USA

Security profile

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

22 Sep 2026DPA changedThe data processing agreement URL changed.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
18 Sep 2026ISO 9001 evidence addedA ISO 9001 row entered the index with state Vendor-stated.
18 Sep 2026NHS DSPT evidence addedA NHS DSPT row entered the index with state Vendor-stated.
18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: 8x8 Group Companies8x8 Group Companies appeared on the subprocessor list.

Similar vendors with evidence

Related by product tags and the Communications and CPaaS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.