Encord
Security and trust center evidence
The data layer for physical AI
Summary
Encord has 3 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 3 vendor-stated rows for Encord, drawn from its trust centre (Vanta). Encord states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report and a data processing agreement, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, PCI DSS and FedRAMP as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
- SOC 2: Vendor states SOC 2 on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among ai tools vendors
0verified rows
Category median 0, across 96 indexed ai tools vendors. Encord has no registry-verified row yet, like 73 percent of them; its evidence is vendor-stated or reported.
computer visiondata annotationdata curationdata labelingtraining data
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 21 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
Subprocessors (16)
- ANAnthropicAI model provider · USA
- CCClickHouse CloudData storage and processing · EU and USA
DocuSign, IncOther · UK
Gemini (Google, LLC)AI Model Provider · EU/USA- GTGet Turnout, Inc. (Unthread)Customer support · USA
Google Cloud PlatformCloud provider · UK and USA
Google WorkspaceCollaboration · Europe- HEHeapData analytics · USA
HubSpotMarketing · Germany
MapboxData visualisation on maps · USA- MOModalCloud compute provider for hosting agents · USA/EU
- SendGrid (Twilio Inc.)Customer support · USA
SentryApplication error monitoring, performance, and observability. · USA
SlackCollaboration · USA- StripeFinance and payments · United Kingdom
XeroFinance and payments · USA
Security profile
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the AI tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
HumanSignal
AI infrastructure
Labeling, evaluation, and quality workflows that deploy where your data lives and scale with the world's most demanding AI
Roboflow
AI tools
🖼️ Give your software the sense of sight.
iMerit
AI infrastructure
iMerit delivers advanced AI data solutions combining intelligent annotation and labeling technology to accelerate scalable
LanceDB
AI tools
Open-source, serverless vectordb for production-scale generative AI
Evidence against regulations
All regulations for EncordHow much of each regulation’s vendor requirements Encord’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read