Conveo

Security and trust center evidence

Growth through always‑on consumer understanding

conveo.ai AI assistantsLast verified 21 Sep 2026

Request the report Are you Conveo?

SOC 2Vendor-stated

GDPRVendor-stated

ISO 27001Vendor-stated

ISO 27701Vendor-stated

Conveo has 4 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is SOC 2: Vendor states SOC 2 - Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Conveo states on its trust centre that it holds a SOC 2 Type II report, as of 21 Sep 2026. Conveo also states on its trust centre that it holds GDPR compliance, as of 21 Sep 2026. Conveo further states on its trust centre that it holds ISO/IEC 27001:2022 certification, as of 21 Sep 2026. Conveo also states on its trust centre that it holds ISO/IEC 27701 certification, as of 21 Sep 2026. All four of these frameworks, SOC 2, GDPR, ISO/IEC 27001:2022 and ISO/IEC 27701, are vendor-stated claims as of 21 Sep 2026, with no independent auditor or registry verification found for any of them.

SOC 2 - vendor states it holds a Type II report on its trust centre, as of 21 Sep 2026
GDPR, ISO/IEC 27001:2022, ISO/IEC 27701 - vendor states on its trust centre, as of 21 Sep 2026
No independent auditor or registry verification found for any framework, as of 21 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 2 Nov 2026; it is regenerated whenever a row changes.

Among ai assistants vendors

0verified rows

Category median 0, across 29 indexed ai assistants vendors. Conveo has no registry-verified row yet, like 55 percent of them; its evidence is vendor-stated or reported.

ai interviewsconsumer insightsconversation analyticsmarket researchqualitative research

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Public · as of 21 Sep 2026

Open

Subprocessor list

Public · 28 subprocessors listed on the trust centre · as of 21 Sep 2026

Open

Subprocessors (28)

AW
AWSCloud Provider · EU
BE
BetterstackOn-call rotation
ClerkIdentity provider · US
DE
DeepgramSpeech to text · Global Endpoint
GitHubVersion control · US
Google Cloud PlatformGemini AI Models · EU, UK, US
Google WorkspaceBusiness Applications · US
GroqSpeech to Text · Global
HubSpotSales and Marketing · EU
IN
InngestAsynchronous workload processing
LangSmith (LangChain)LLM Observability · US
LinearCollaboration & Bug Tracking · US
LiveKitVideo Recording Provider · EU, US
LoomCollaboration
M3
Microsoft 365Business Applications · EU
MuxVideo encoding and playback · EU and US
NO
NotionCollaboration · EU
OpenAILLM Model · US
PL
PlainCustomer Support · EU
PL
PlanHatplanhat.com
PosthogAnalytics · EU
RE
ResendEmail sending
SentryCloud monitoring · EU, US
SlackCollaboration · US
StripePayment Services · EU
SU
SupabaseCloud provider · EU (Frankfurt)
VantaSecurity · EU
ZoomMeetings and Collaboration · EU

Security profile

Pen test cadence: annual
Trains on customer data: no

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

22 Sep 2026AI training policy changedTraining on customer data moved from unknown to no.
18 Sep 2026First indexed by CertReports4 evidence rows across 4 frameworks entered the index.