Intercom

Security and trust center evidence

intercom.com Customer supportLast verified 17 Sep 2026

Request the report Are you Intercom?

HIPAAVendor-stated

SOC 2Vendor-stated

GDPRVendor-stated

ISO 27001Vendor-stated

CSA STARVendor-stated

ISO 27701Vendor-stated

ISO 42001Vendor-stated

ISO 27018Vendor-stated

DPFVerified

CCPAVendor-stated

HDSVendor-stated

Intercom has 1 registry-verified row and 10 vendor-stated rows in the CertReports index, last verified 17 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 17 Sep 2026, Intercom states on its trust centre that it holds SOC 2, though no report details are provided in this evidence. As of 17 Sep 2026, Intercom displays a HIPAA badge on its trust centre, but BAA availability is not yet captured, so this should be confirmed directly with the vendor. As of 17 Sep 2026, Intercom states on its trust centre that it holds ISO/IEC 27001:2022, ISO/IEC 27701, ISO/IEC 42001:2023, ISO/IEC 27018, GDPR, CCPA/CPRA, CSA STAR for AI, and HDS, all as vendor statements rather than independently verified records in this evidence set. As of 17 Sep 2026, Intercom is listed in the EU-US Data Privacy Framework registry with an active EU-US Certification, SW-US Certification, and UK Extension Certification, issued 13 Oct 2016 and expiring 14 Nov 2026. No public evidence found for any additional frameworks beyond those listed as of 17 Sep 2026.

HIPAA: vendor displays a HIPAA badge on its trust centre as of 17 Sep 2026; BAA availability not yet captured.
SOC 2: vendor states on its trust centre that it holds SOC 2, as of 17 Sep 2026 (no report details in evidence).
EU-US Data Privacy Framework: listed in DPF registry as of 17 Sep 2026, active certification issued 13 Oct 2016, expiring 14 Nov 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.

Among customer support vendors

1verified rows

Category median 1, across 63 indexed customer support vendors. Intercom has more verified rows than 81 percent of them.

customer communicationhelp desklive chatmessaging platform

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, Cyber Essentials. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 14 subprocessors listed on the trust centre · as of 17 Sep 2026

Open

Public · as of 17 Sep 2026

Open

Subprocessors (14)

AB
AblyMessage delivery service · USA, EU or Australia dependent upon customers selected region
Amazon Web Services, Inc.Hosting, storage and processing (including AI processing) of Customer Data · USA or EU dependent upon customer's selected region
AP
Anthropic, PBCProvides large language model processing via APIs for customers using Intercom’s AI Products (USA). · USA
CA
Cartesia AI, Inc.AI processing (text to speech) · USA or EU dependent upon customer's selected region
Cloudflare, Inc.Transport Layer Security ("TLS") protection for customers using a custom domain to host their Intercom Articles. Compute and storage infrastructure for Intercom MCP server (Ireland) · USA or EU dependent upon Customer's selected region
EL
Eleven Labs, Inc.AI Processing (text to speech) · USA or EU dependent upon customer's selected region
GO
GoogleProvides AI processing · USA or EU dependent upon customer's selected region
Mailgun Technologies, LLCEmail delivery services for individual emails and bulk email campaigns initiated from Intercom's services · USA
Message Systems, Inc. (d/b/a Sparkpost)Email delivery services for individual emails and bulk email campaigns initiated from Intercom's services · USA
Microsoft Corporation (EU)AI processing · USA or EU dependent upon customer's selected region
OpenAI, L.L.C.AI processing · USA or EU dependent upon customer's selected region
PI
PlanetScale Inc.Database storage and caching · USA or EU dependent upon customer's selected region
Snowflake Inc.Data warehouse services and processing (including AI processing) · USA or EU dependent upon customer's selected region
Twilio, Inc.SMS and Phone functionality · USA

Change history

17 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
17 Sep 2026CSA STAR evidence addedA CSA STAR row entered the index with state Vendor-stated.
17 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
17 Sep 2026HDS evidence addedA HDS row entered the index with state Vendor-stated.
17 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
17 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
17 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
17 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
17 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Customer support category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.