CodeSignal

Security and trust center evidence

Discover the agentic skills intelligence platform that helps teams see, measure, develop, and grow skills clearly with

codesignal.com Research and data providersLast verified 26 Oct 2026

Request the report Are you CodeSignal?

CodeSignal has 4 vendor-stated rows, and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

CodeSignal states on its trust centre that it holds a SOC 2 Type II report, as of 21 Sep 2026. CodeSignal states on its trust centre that it complies with GDPR, as of 21 Sep 2026. CodeSignal states on its trust centre that it complies with CCPA/CPRA, as of 21 Sep 2026. CodeSignal states on its trust centre that it holds TX-RAMP status, as of 21 Sep 2026. CodeSignal's EU-US Data Privacy Framework registration, originally issued on 16 Oct 2025, is now listed as inactive as of 26 Oct 2026, indicating a lapse shortly after registration.

SOC 2: vendor states it holds a SOC 2 Type II report on its trust centre as of 21 Sep 2026.
GDPR / CCPA-CPRA / TX-RAMP: vendor states compliance on its trust centre as of 21 Sep 2026.
EU-US Data Privacy Framework: expired (inactive) as of 26 Oct 2026; issued 16 Oct 2025.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 1 Nov 2026; it is regenerated whenever a row changes.

Among research and data providers vendors

0verified rows

Category median 0, across 147 indexed research and data providers vendors. CodeSignal has no registry-verified row yet, like 52 percent of them; its evidence is vendor-stated or reported.

coding assessmentskills assessmenttalent evaluationtechnical screening

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 26 subprocessors listed on the trust centre · as of 21 Sep 2026

Open

Subprocessors (26)

Amazon Web ServicesInfrastructure Hosting · US
AmplitudeProduct Analytics · US
CD
Claude (Dev Platform)AI / LLM · US
CloudflareNetwork, Edge & Security · US
DatadogMonitoring & Logging · US
DE
DeepgramAI / LLM (Voice) · US
ElevenLabsAI / LLM (Voice) · US
FO
ForeThoughtCustomer Support (AI) · US
Google (Gemini)AI / LLM · US
IN
InngestWorkflow & Eventing · US
MO
ModeInternal BI & Analytics · US
MongoDB AtlasCloud hosting · US
NangoIntegration Infrastructure · US
NeonDatabase & Data Stores · US
OpenAI (Dev Platform)AI / LLM · US
OP
OpenRouterAI / LLM (Routing) · US
PostmarkEmail Delivery · US
RE
RevenueCatBilling & Subscriptions · US
SalesforceCRM / Sales & Marketing · US
SE
SendSafelySecure File Transfer · US
SI
SimplesatCustomer Support Feedback · US
SnowflakeData storage and processing · US
SprigProduct Analytics & Surveys · US
StripeBilling & Payments · US
VercelInfrastructure & Hosting · US
ZendeskCustomer Support · US

Security profile

Pen test cadence: report available
Data residency: US
Trains on customer data: no

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

19 Oct 2026EU-US Data Privacy Framework state changedState moved from Verified to Expired.
22 Sep 2026AI training policy changedTraining on customer data moved from unknown to no.
18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026TX-RAMP evidence addedA TX-RAMP row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
18 Sep 2026Subprocessor added: AmplitudeAmplitude appeared on the subprocessor list.
18 Sep 2026Subprocessor added: Claude (Dev Platform)Claude (Dev Platform) appeared on the subprocessor list.
18 Sep 2026Subprocessor added: CloudflareCloudflare appeared on the subprocessor list.

Similar vendors with evidence

Related by product tags and the Research and data providers category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.