CB Insights
Security and trust center evidence
Private company data and research on 12M+
Summary
CB Insights has 1 registry-verified row and 3 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 30 Sep 2026, CB Insights states on its trust centre that it holds a SOC 2 Type II report, per vendor-stated evidence recorded via Vanta. As of 30 Sep 2026, CB Insights states on its trust centre that it is GDPR compliant, per vendor-stated evidence recorded via Vanta. As of 19 Oct 2026, CB Insights is listed in the EU-US Data Privacy Framework registry as active, covering an EU-US Certification and a UK Extension Certification, originally issued 18 Feb 2025 and valid through 28 Jan 2027. As of 30 Sep 2026, CB Insights states on its trust centre that it adheres to CCPA/CPRA requirements, per vendor-stated evidence recorded via Vanta. No public evidence found for a HIPAA BAA offering for CB Insights as of any reviewed date.
- SOC 2: vendor states SOC 2 Type II on trust centre (as of 30 Sep 2026)
- EU-US Data Privacy Framework: active, listed in registry, valid through 28 Jan 2027 (as of 19 Oct 2026)
- GDPR / CCPA: vendor states compliance on trust centre (as of 30 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Oct 2026; it is regenerated whenever a row changes.
Among research and data providers vendors
1verified rows
Category median 0, across 147 indexed research and data providers vendors. CB Insights has more verified rows than 55 percent of them.
company intelligencecompetitive analysisinvestment researchmarket research
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 30 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 30 Sep 20262 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, UK Extension Certification
as of 2 Nov 20261 source- CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 30 Sep 20262 sources
Legal artefacts
Subprocessors (10)
Amazon Web ServicesCloud provider · USA- CMCampaign Monitor Pty Ltd.Marketing Automation · USA
- CPChili Piper, Inc.Marketing Automation · USA
- DataGrail, Inc.Privacy Automation · USA
FullStory, Inc.Product Analytics · USA- Gong.io Inc.Customer Intelligence · USA
Hubspot, Inc.Marketing Automation · USA- LILeanData, Inc.Marketing Automation · USA
Salesforce, Inc.Customer Relationship Management · USA- Sendgrid, by Twilio, Inc.Marketing Automation · USA
Security profile
- Pen test cadence
- annual
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Campaign Monitor Pty Ltd.Campaign Monitor Pty Ltd. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Chili Piper, Inc.Chili Piper, Inc. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: DataGrail, Inc.DataGrail, Inc. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: FullStory, Inc.FullStory, Inc. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Gong.io Inc.Gong.io Inc. appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Hubspot, Inc.Hubspot, Inc. appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Research and data providers category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
DiligenceSquared
AI tools
AI-powered market due diligence for investment decisions
Social Lens Research
Research and data providers
User-centered Online Market Research Social Lens Research is a leading Digital Insights Agency specializing in immersive research
CoLoop
Research and data providers
AI Copilot for insights & strategy
M3 USA
Research and data providers
M3 Global Research provides healthcare market research fieldwork, powered by the world's largest panel of verified healthcare
Evidence against regulations
All regulations for CB InsightsHow much of each regulation’s vendor requirements CB Insights’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read