Skip to main content
Ambassador logo

Ambassador

Security and trust center evidence

Grow, keep, and prove revenue from the customers you already

getambassador.comLast verified 26 Oct 2026
Request the report Are you Ambassador?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 30 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 30 Sep 2026GDPRVendor-statedPCI DSS mark, CertReports state Vendor-stated as of 30 Sep 2026PCI DSSVendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 26 Oct 2026DPFExpiredCCPA / CPRA mark, CertReports state Vendor-stated as of 30 Sep 2026CCPAVendor-stated

Ambassador has 4 vendor-stated rows, and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 18 Sep 2026, Ambassador states on its trust centre that it holds SOC 2, GDPR, PCI-DSS 4.0, and CCPA/CPRA compliance (source: Vanta). These four records are vendor statements rather than registry listings or third-party attestations, as of 18 Sep 2026. Ambassador's EU-US Data Privacy Framework listing is expired, shown as Inactive in the registry, as of 17 Sep 2026. No issue date is recorded for that Data Privacy Framework listing in the evidence reviewed as of 17 Sep 2026. No public evidence was found for ISO/IEC, HIPAA, or FedRAMP frameworks for Ambassador as of 18 Sep 2026.

  • Vendor states SOC 2, GDPR, PCI-DSS 4.0, and CCPA/CPRA on its trust centre, as of 18 Sep 2026 (Vanta).
  • EU-US Data Privacy Framework listing Inactive (expired), as of 17 Sep 2026.
  • No public evidence found for ISO/IEC, HIPAA, or FedRAMP as of 18 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Evidence count

0verified rows

customer retentionloyaltyreferral marketingrevenue growth

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (23)

  • Amazon Web Services logo
    Amazon Web ServicesCloud services provider · USA and Canada
  • Anthropic logo
    AnthropicAI assistant tooling used internally by staff that may process program and customer data · USA
  • Auth0 logo
    Auth0Identity provider · USA
  • Cloudflare logo
    CloudflareDNS, CDN, Networking, and Security · USA
  • EN
    EntriStreamline the subdomain setup process for Ambassador clients · USA
  • Files.com logo
    Files.comFile transfer · USA
  • FullStory logo
    FullStorySupport monitoring · USA
  • Google logo
    GoogleOffice Suite · USA
  • Google Cloud Platform logo
    Google Cloud PlatformData warehouse and backups · USA
  • Hubspot logo
    HubspotBidirectional CRM sync of contacts and referral/reward activity with the client's HubSpot, plus Ambassador's own CS operations · USA
  • OpenAI logo
    OpenAIEngineering · USA
  • PagerDuty logo
    PagerDutyService alerts · USA
  • Salesforce logo
    SalesforceBidirectional referral-program sync with the client's Salesforce (advocates, referees, commissions, campaigns) · USA
  • Sendoso logo
    SendosoCorporate gifting / direct-mail fulfillment of rewards on behalf of clients · USA
  • Sentry logo
    SentryError Logging · USA
  • Shopify logo
    ShopifyE-commerce integration; ingests orders and customers to attribute referrals and issue rewards for Shopify stores · USA and Canada
  • Sonobi (Lamark Media Group, LLC) logo
    Sonobi (Lamark Media Group, LLC)Programmatic advertising · USA
  • Stripe logo
    StripePayment processing, advocate reward payouts, company wallet funding, and referral attribution · USA
  • Tango (Blackhawk Network) logo
    Tango (Blackhawk Network)Issue rewards · USA
  • TI
    Tray.ioAutomation and integration · USA
  • Twilio & SendGrid logo
    Twilio & SendGridEmail sending · USA
  • WO
    WooCommerceE-commerce integration; ingests orders and customers to attribute referrals and issue rewards for WooCommerce stores · USA
  • Zapier logo
    ZapierIntegration and automation · San Francisco, CA, USA

Security profile

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

  1. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
  4. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  5. 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
  6. 18 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.
  7. 18 Sep 2026Subprocessor added: Auth0Auth0 appeared on the subprocessor list.
  8. 18 Sep 2026Subprocessor added: CloudflareCloudflare appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: EntriEntri appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: Files.comFiles.com appeared on the subprocessor list.

Evidence against regulations

All regulations for Ambassador

How much of each regulation’s vendor requirements Ambassador’s public evidence reaches.

Reviewing a vendor on public evidence

All articles