Clay

Security and trust center evidence

Infrastructure to get any data, run agentic workflows, and launch GTM

clay.comLast verified 19 Sep 2026

Request the report Are you Clay?

SOC 2Vendor-stated

GDPRVendor-stated

ISO 27001Vendor-stated

ISO 42001Vendor-stated

CCPAVendor-stated

Clay has 5 vendor-stated rows in the CertReports index, last verified 19 Sep 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Clay states it holds a SOC 2 Type II report. Clay states it holds a data processing agreement. Clay states it holds an ISO/IEC 27001 certificate. Clay states it holds an ISO/IEC 42001 certificate.

SOC 2: Vendor states SOC 2 Type 2 on its trust centre (as of 19 Sep 2026)
GDPR: Vendor states GDPR on its trust centre (as of 19 Sep 2026)
ISO/IEC 27001: Vendor states ISO 27001:2022 on its trust centre (as of 19 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

0verified rows

Compliance grid

No public evidence yet for HIPAA, FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 27701. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Public · as of 19 Sep 2026

Open

Subprocessor list

Public · 34 subprocessors listed on the trust centre · as of 19 Sep 2026