Dialpad
Security and trust center evidence
The only AI-driven, cloud-native business communications
Summary
Dialpad has 1 registry-verified row and 9 vendor-stated rows, and 1 expired in the CertReports index, last verified 3 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 18 Sep 2026, Dialpad states on its trust centre that it holds SOC 2, GDPR, PCI DSS, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, CCPA/CPRA, and TX-RAMP (source: Drata). Dialpad also displays a HIPAA badge on its trust centre as of 18 Sep 2026, though BAA availability is not captured in the evidence. Dialpad is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) dated 11 Sep 2019, as of 17 Sep 2026. Dialpad's EU-US Data Privacy Framework listing is expired, shown as Inactive in the registry with an original listing of 20 Dec 2018, as of 17 Sep 2026. All SOC 2, ISO, GDPR, PCI DSS, CCPA/CPRA, TX-RAMP, and HIPAA records for Dialpad are vendor statements rather than registry or third-party attestations, as of 18 Sep 2026.
- Vendor states SOC 2, GDPR, PCI DSS, ISO/IEC 27001:2022, 27017:2015, 27018:2019, CCPA/CPRA, and TX-RAMP on its trust centre, as of 18 Sep 2026 (Drata).
- HIPAA badge displayed on trust centre as of 18 Sep 2026; BAA availability not captured in evidence.
- CSA STAR Level 1 self-assessment (CAIQ) since 11 Sep 2019; EU-US Data Privacy Framework listing Inactive (expired) since 20 Dec 2018, as of 17 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among communications and cpaas vendors
1verified rows
Category median 1, across 45 indexed communications and cpaas vendors. Dialpad has more verified rows than 36 percent of them.
business phonecontact centerunified communicationsvideo conferencingvoip
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 3 Nov 202623 sources
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 3 Nov 202623 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 3 Nov 202623 sources
PCI DSSVendor-statedVendor states PCI DSS on its trust centre
as of 3 Nov 202623 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 3 Nov 202623 sources- CSA STARVerified
STAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
ISO/IEC 27017Vendor-statedVendor states ISO/IEC 27017:2015 on its trust centre
as of 3 Nov 202623 sources
ISO/IEC 27018Vendor-statedVendor states ISO/IEC 27018:2019 on its trust centre
as of 3 Nov 202623 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source- CCPA / CPRAVendor-stated
Vendor states CPRA on its trust centre
as of 3 Nov 202623 sources
TX-RAMPVendor-statedVendor states TX-RAMP on its trust centre
as of 3 Nov 202623 sources
No public evidence yet for FedRAMP, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 3 Nov 2026.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026TX-RAMP evidence addedA TX-RAMP row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Communications and CPaaS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
RingCentral
Communications and CPaaS
Power the voice of your business with RingCentral Agentic Voice AI, including AI Receptionist (AIR), AI Virtual Assistant (AVA), & AI
SignalWire
Communications and CPaaS
Build AI voice agents, contact centers, and unified communications on one programmable
GoTo
Communications and CPaaS
Businesses of all sizes trust GoTo to power business growth and support
Vonage
Communications and CPaaS
Vonage, a global cloud communications leader, helps businesses accelerate their digital
Evidence against regulations
All regulations for DialpadHow much of each regulation’s vendor requirements Dialpad’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read