Skip to main content
ClickUp logo

ClickUp

Security and trust center evidence

Our mission is to make the world more

clickup.comProject managementLast verified 1 Nov 2026
Request the report Are you ClickUp?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 1 Nov 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 1 Nov 2026GDPRVendor-statedPCI DSS mark, CertReports state Vendor-stated as of 1 Nov 2026PCI DSSVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 1 Nov 2026ISO 27001Vendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 1 Nov 2026ISO 27701Vendor-statedISO/IEC 42001 mark, CertReports state Vendor-stated as of 1 Nov 2026ISO 42001Vendor-statedSOC 3 mark, CertReports state Vendor-stated as of 1 Nov 2026SOC 3Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 1 Nov 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 1 Nov 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 26 Oct 2026DPFExpiredCCPA / CPRA mark, CertReports state Vendor-stated as of 1 Nov 2026CCPAVendor-stated

ClickUp has 10 vendor-stated rows, and 1 expired in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 17 Sep 2026, ClickUp states on its trust centre that it has a SOC 2 report, and separately states PCI DSS, GDPR and CCPA. As of 17 Sep 2026, ClickUp states on its trust centre ISO/IEC 27001, ISO/IEC 27701:2019, ISO/IEC 42001:2023, ISO/IEC 27017:2015, ISO/IEC 27018:2019 and SOC 3. As of 17 Sep 2026, the EU-US Data Privacy Framework registry shows ClickUp's certification as inactive, originally issued 1 Feb 2017. As of 17 Sep 2026, no public evidence was found for a FedRAMP authorization for ClickUp. As of 17 Sep 2026, no public evidence was found for a CSA STAR listing for ClickUp.

  • SOC 2: states it has a SOC 2 report on its trust centre (as of 17 Sep 2026)
  • PCI DSS: states it has PCI DSS on its trust centre, no registry verification on file (as of 17 Sep 2026)
  • EU-US Data Privacy Framework: inactive listing, originally issued 1 Feb 2017 (as of 17 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among project management vendors

0verified rows

Category median 1, across 51 indexed project management vendors. ClickUp has no registry-verified row yet, like 47 percent of them; its evidence is vendor-stated or reported.

productivitytask managementteam collaborationwork management

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, CSA STAR, Cyber Essentials. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Displayed as a security profile from public statements, not as attestations, as of 1 Nov 2026.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 17 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  4. 17 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  5. 17 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  6. 17 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  7. 17 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
  8. 17 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
  9. 17 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  10. 17 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Project management category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Wrike logo

Wrike

Project management

Wrike is a work management platform that delivers real-time project and task insight to its

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state VerifiedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 27701 mark, CertReports state Vendor-stated
4 verified · 8 stated1 Nov 2026
WorkZone logo

WorkZone

Project management

Workzone helps teams stay organized, meet deadlines, and collaborate better with powerful, easy-to-use project management software built

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated26 Oct 2026
Hive Technology logo

Hive Technology

Project management

Use Hive's project management software to manage your projects, track tasks and collaborate with teams of any

DPF mark, CertReports state Verified
1 verified26 Oct 2026
Redbooth logo

Redbooth

Project management

Redbooth helps teams manage tasks and communication so projects get completed faster and

DPF mark, CertReports state Expired
26 Oct 2026

Evidence against regulations

All regulations for ClickUp

How much of each regulation’s vendor requirements ClickUp’s public evidence reaches.

Reviewing a vendor on public evidence

All articles