CircleCo

Security and trust center evidence

Build a home for your community, events, and courses — all under your own

circle.so CollaborationLast verified 3 Nov 2026

Request the report Are you CircleCo?

CircleCo has 2 registry-verified rows and 3 vendor-stated rows, and 1 expired in the CertReports index, last verified 3 Nov 2026. The strongest row is SOC 2: Evidenced by the public SOC 3 report for the same examination period. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

CircleCo's SOC 2 status is evidenced by a public SOC 3 report for the same examination period, audited by Sensiba, with the period ending 4 Nov 2025 and the report issued 12 Dec 2025, as of 31 Oct 2026. CircleCo also publishes the SOC 3 report itself on its trust centre, covering the same auditor and period, as of 31 Oct 2026. CircleCo states on its trust centre that it complies with GDPR and CCPA/CPRA, as of 21 Sep 2026. CircleCo states on its trust centre that it meets PCI DSS SAQ A, as of 21 Sep 2026. CircleCo's EU-US Data Privacy Framework status is listed as inactive (expired), as of 26 Oct 2026.

SOC 2: Evidenced via public SOC 3 report, auditor Sensiba, period ended 4 Nov 2025, issued 12 Dec 2025, as of 31 Oct 2026.
PCI DSS: Vendor states SAQ A on trust centre, as of 21 Sep 2026.
EU-US DPF: Listed as inactive (expired), as of 26 Oct 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 31 Oct 2026; it is regenerated whenever a row changes.

Among collaboration vendors

2verified rows

Category median 1, across 95 indexed collaboration vendors. CircleCo has more verified rows than 87 percent of them.

community platformeventsmembership softwareonline courses

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 20 subprocessors listed on the trust centre · as of 21 Sep 2026

Open

Public · as of 21 Sep 2026

Open

Public trust centre documents

Public · SOC 3 (Full report) · as of 18 Sep 2026

Open

AI and data use policy

Public · Listed on the trust centre as "AI Policy" · as of 21 Sep 2026

Open

Subprocessors (20)

10
100MSAudio and video infrastructure · USA
Amazon Web ServicesCloud hosting · USA
AnthropicProcesses prompts and user-submitted content when AI-enabled features are activated within Circle. · USA
BR
BraintrustAI evaluation · USA
BuildkiteCI / CD pipelines · USA
ClayData enrichment and GTM workflows · USA
CloudflareObservability, monitoring, and security · USA
dbt CloudData transformation and analytics engineering · USA
FA
FathomCall transcripts · USA
FO
ForethoughtAI support automation · USA
GC
Google CloudCloud hosting · USA
HU
HubspotCRM & marketing · USA
LiveKitAudio and video infrastructure · USA
MailgunEmail delivery service · USA
New RelicObservability and monitoring · USA
OP
OpenAILLMs and other AI features · USA
RE
RevenueCatFinance and payments · USA
ST
StripeFinance and payments · USA
ZA
ZapierWorkflows · USA
ZE
ZendeskCustomer support · USA

Security profile

Data residency: EU, UK, US

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
25 Sep 2026SOC 2 auditor changedAuditor changed from unknown to Sensiba.
25 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Verified.
18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: 100MS100MS appeared on the subprocessor list.
18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
18 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.