Culture Amp
Compliance evidence
Empower your teams and fuel positive change with performance, development, and employee engagement tools – all-in-one intuitive employee
Compliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 21 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 21 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001 on its trust centre
as of 21 Sep 20262 sources
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 26 Oct 20265 sources
ISO/IEC 42001Vendor-statedVendor states ISO/IEC 42001:2023 on its trust centre
as of 21 Sep 20262 sources
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 21 Sep 20262 sources
IRAPVendor-statedVendor states IRAP on its trust centre
as of 21 Sep 20262 sources
No public evidence yet for HIPAA, FedRAMP, PCI DSS, Cyber Essentials, ISO 27701. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.