Hightouch

Security and trust center evidence

The leading Composable CDP and AI Decisioning platform

hightouch.com MarketingLast verified 2 Nov 2026

Request the report Are you Hightouch?

HIPAAVendor-stated

SOC 2Vendor-stated

GDPRVendor-stated

ISO 27001Vendor-stated

DPFVerified

CCPAVendor-stated

Hightouch has 1 registry-verified row and 5 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Hightouch states on its trust centre that it displays a HIPAA badge, with BAA availability not confirmed, as of 18 Sep 2026. Hightouch states on its trust centre that it holds SOC 2, GDPR, ISO/IEC 27001:2022 and CCPA/CPRA, as of 18 Sep 2026. Hightouch is listed in the EU-US Data Privacy Framework registry as active across the EU-US Certification, SW-US Certification and UK Extension Certification, issued 20 May 2024 and valid through 20 Nov 2026, as of 17 Sep 2026. The Data Privacy Framework listing for Hightouch is sourced from the DPF registry rather than a vendor statement, as of 17 Sep 2026. Hightouch's vendor-stated frameworks - HIPAA, SOC 2, GDPR, ISO/IEC 27001 and CCPA/CPRA - are self-reported as of 18 Sep 2026, separate from the registry-verified Data Privacy Framework entry as of 17 Sep 2026.

HIPAA - vendor states a badge is displayed on its trust centre; BAA availability not confirmed (as of 18 Sep 2026)
SOC 2, GDPR, ISO/IEC 27001:2022, CCPA/CPRA - vendor states on its trust centre it holds each (as of 18 Sep 2026)
EU-US Data Privacy Framework - listed as active (EU-US, SW-US, UK Extension), issued 20 May 2024, valid through 20 Nov 2026 (as of 17 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 21 Sep 2026; it is regenerated whenever a row changes.

Among marketing vendors

1verified rows

Category median 0, across 181 indexed marketing vendors. Hightouch has more verified rows than 57 percent of them.

ai-marketingaudience-activationcdpcustomer-data

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.

Subprocessors

No subprocessor list captured yet.

Change history

18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.