Deepnote
Security and trust center evidence
A better data science notebook.
Summary
Deepnote has 4 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 4 vendor-stated rows for Deepnote, drawn from its trust centre (Vanta). Deepnote states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report, a data processing agreement and an CCPA / CPRA privacy notice, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, PCI DSS and FedRAMP as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
- SOC 2: Vendor states SOC 2 Type II on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among ai tools vendors
0verified rows
Category median 0, across 96 indexed ai tools vendors. Deepnote has no registry-verified row yet, like 73 percent of them; its evidence is vendor-stated or reported.
data explorationdata science notebookpython sql notebookteam collaboration
Compare with similar vendors
Pick your own comparisonCompliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 21 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 21 Sep 20262 sources
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
Subprocessors (19)
Amazon Web ServicesCloud infrastructure · United States
AnthropicAI services · United States- CHChartMogulRevenue analytics · EU
Google Cloud PlatformCloud infrastructure · United States- Google WorkspaceProductivity & communication tools · United States
- HCHetzner CloudCloud infrastructure · EU
HubSpotCRM & marketing automation · United States
IntercomCustomer support · United States
MailgunTransactional email · United States
Microsoft AzureCloud infrastructure & AI · United States
Mistral AIAI Service · EU
Open AIAI services · United States
PostHogProduct analytics · United States
ProductBoardProduct management · United States- SESentryError monitoring · United States
SprigProduct feedback · United States
StitchData pipelines (ETL) · United States
StripePayment processing · United States- WOWorkOSAuthentication (SSO, SCIM) · United States
Security profile
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports4 evidence rows across 4 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the AI tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Explore Analytics
Analytics
Explore Analytics is a service that lets you access, explore, analyze, and share your data with your
Openlayer
AI tools
The fastest way to ship airtight AI
Quo fka OpenPhone
AI tools
The all-in-one business phone for teams.
Cactus
AI tools
All-In-One AI Growth Partner. Built for Trades.
Evidence against regulations
All regulations for DeepnoteHow much of each regulation’s vendor requirements Deepnote’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read