Skip to main content
Dialpad logo

Dialpad

Security and trust center evidence

The only AI-driven, cloud-native business communications

dialpad.comCommunications and CPaaSLast verified 3 Nov 2026

Summary

Dialpad has 1 registry-verified row and 9 vendor-stated rows, and 1 expired in the CertReports index, last verified 3 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 18 Sep 2026, Dialpad states on its trust centre that it holds SOC 2, GDPR, PCI DSS, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, CCPA/CPRA, and TX-RAMP (source: Drata). Dialpad also displays a HIPAA badge on its trust centre as of 18 Sep 2026, though BAA availability is not captured in the evidence. Dialpad is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) dated 11 Sep 2019, as of 17 Sep 2026. Dialpad's EU-US Data Privacy Framework listing is expired, shown as Inactive in the registry with an original listing of 20 Dec 2018, as of 17 Sep 2026. All SOC 2, ISO, GDPR, PCI DSS, CCPA/CPRA, TX-RAMP, and HIPAA records for Dialpad are vendor statements rather than registry or third-party attestations, as of 18 Sep 2026.

  • Vendor states SOC 2, GDPR, PCI DSS, ISO/IEC 27001:2022, 27017:2015, 27018:2019, CCPA/CPRA, and TX-RAMP on its trust centre, as of 18 Sep 2026 (Drata).
  • HIPAA badge displayed on trust centre as of 18 Sep 2026; BAA availability not captured in evidence.
  • CSA STAR Level 1 self-assessment (CAIQ) since 11 Sep 2019; EU-US Data Privacy Framework listing Inactive (expired) since 20 Dec 2018, as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among communications and cpaas vendors

1verified rows

Category median 1, across 45 indexed communications and cpaas vendors. Dialpad has more verified rows than 36 percent of them.

business phonecontact centerunified communicationsvideo conferencingvoip

Compliance grid

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 3 Nov 2026.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  6. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  7. 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
  8. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  9. 18 Sep 2026TX-RAMP evidence addedA TX-RAMP row entered the index with state Vendor-stated.
  10. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Communications and CPaaS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Evidence against regulations

All regulations for Dialpad

How much of each regulation’s vendor requirements Dialpad’s public evidence reaches.

All articles