Fathom.video

Security and trust center evidence

Fathom captures, transcribes, and summarizes Zoom, Google Meet, and Microsoft Teams

fathom.video CRMLast verified 2 Nov 2026

Request the report Are you Fathom.video?

Fathom.video has 1 registry-verified row and 4 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Fathom.video states on its trust centre that it holds SOC 2 Type II, as of 25 Sep 2026. Fathom.video states on its trust centre that it complies with GDPR and CCPA/CPRA, as of 25 Sep 2026. Fathom.video displays a HIPAA badge on its trust centre; BAA availability has not yet been captured, as of 25 Sep 2026. Fathom.video is listed in the EU-US Data Privacy Framework registry as active for the EU-US Certification, the UK Extension Certification and the SW-US Certification, as of 17 Sep 2026. The EU-US Data Privacy Framework listing shows a certification date of 7 May 2024 and an expiry of 23 Jun 2027, as of 17 Sep 2026.

SOC 2 Type II, GDPR, CCPA/CPRA: vendor states on its trust centre, as of 25 Sep 2026
HIPAA: vendor displays a badge on its trust centre; BAA availability not yet captured, as of 25 Sep 2026
EU-US Data Privacy Framework: listed as active (EU-US, UK Extension, SW-US), certified 7 May 2024, expires 23 Jun 2027, as of 17 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Sep 2026; it is regenerated whenever a row changes.

Among crm vendors

1verified rows

Category median 0.5, across 44 indexed crm vendors. Fathom.video has more verified rows than 50 percent of them.

crm-integrationmeeting-recordingmeeting-summarizationtranscription

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 30 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Public · as of 30 Sep 2026

Open

Public trust centre documents

Public · SOC 2 Bridge Letter · as of 18 Sep 2026

Open

Data processing agreement

Public · Listed on the trust centre as "Data Processing Agreement (DPA)" · as of 30 Sep 2026

Open

Subprocessors (30)

AmplitudeData analytics · USA
AnthropicAI Provider · USA
BR
BrandfetchBrand & Logo API · USA
CensusData Analytics & ETL · USA
CH
ChartMogulData analytics · USA
CloudflareCDN · USA
CO
CourierEmail Provider · USA
EL
ElasticSearch Provider · USA
ElevenLabsAI Provider · USA
FireworksAI Provider · USA
FiveTranData Analytics & ETL · USA
FR
FrontHelpdesk Provider · USA
Google Cloud PlatformPrimary Cloud Provider · USA
HexData analytics · USA
HubSpotCRM · USA
MO
ModalAI Provider · USA
New RelicApplication Monitoring · USA
omniData analytics · USA
OpenAIAI Provider · USA
PostmarkEmail Provider · USA
PU
PusherIn-App Communication · USA
RetoolData Analytics & ETL · USA
RE
RevealPartnership Marketing Platform · Belgium
RE
RevenueHeroSales · USA
SentryApplication Monitoring · USA
SP
SphereFinance and payments · USA
StripePayment Processor · USA
US
UserVoiceFeedback Tracking Platform · USA
VA
Voyage AIAI Provider · USA
WarmlySales · USA

Security profile

Pen test cadence: report available

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

22 Sep 2026DPA changedThe data processing agreement URL changed.
18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: AmplitudeAmplitude appeared on the subprocessor list.
18 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.
18 Sep 2026Subprocessor added: BrandfetchBrandfetch appeared on the subprocessor list.
18 Sep 2026Subprocessor added: CensusCensus appeared on the subprocessor list.
18 Sep 2026Subprocessor added: ChartMogulChartMogul appeared on the subprocessor list.