Kustomer
Security and trust center evidence
Deliver faster, personalized support with Kustomer's AI customer service
Summary
Kustomer has 1 registry-verified row and 7 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 26 Sep 2026, Kustomer states on its trust centre that it holds SOC 2 Type II, ISO/IEC 27001:2022, ISO/IEC 27701, and ISO/IEC 42001:2023, alongside GDPR and CCPA statements. As of 26 Sep 2026, Kustomer states on its trust centre that it displays a HIPAA badge, though BAA availability is not yet confirmed. As of 17 Sep 2026, Kustomer is listed in the EU-US Data Privacy Framework registry as active, covering EU-US, SW-US, and UK Extension Certifications, issued 31 Jan 2023 and expiring 8 Apr 2027. No public evidence of PCI DSS validation was found for Kustomer as of 17 Sep 2026. No public evidence of FedRAMP authorization was found for Kustomer as of 26 Sep 2026.
- SOC 2, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, GDPR, CCPA: vendor states on its trust centre (as of 26 Sep 2026)
- HIPAA: vendor states on its trust centre that it displays a HIPAA badge; BAA availability not confirmed (as of 26 Sep 2026)
- EU-US Data Privacy Framework: listed in registry as active through 8 Apr 2027 (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Sep 2026; it is regenerated whenever a row changes.
Among customer support vendors
1verified rows
Category median 1, across 110 indexed customer support vendors. Kustomer has more verified rows than 36 percent of them.
contact centercustomer experiencecustomer service crmhelpdeskomnichannel support
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 30 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 30 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27701Vendor-statedVendor states ISO 27701 on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 42001Vendor-statedVendor states ISO/IEC 42001:2023 on its trust centre
as of 30 Sep 20262 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20261 source- CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 30 Sep 20262 sources
No public evidence yet for FedRAMP, PCI DSS, CSA STAR, Cyber Essentials. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors (15)
- AWAmazon Web ServicesCloud Hosting Provider for Kustomer Application, SES, and AI Services including Amazon Bedrock, which serves as the AI model inference and data processing layer for Kustomer AI features · United States, Ireland, India
AnthropicEngineering · United States- CIClickHouse, Inc.Reporting and Analytics · United States
CoralogixCloud monitoring · United States, Ireland, India- DEDeepgramVoice Transcription · United States
- ECElastic CloudSearch Functionality · United States or Ireland
GoogleEMail API · United States
MongoDB AtlasDatabase · United States, Ireland, India
OpenAIAI Features · United States- PEPendoData analytics · United States
PostmarkEmail Channel · United States
PubnubSupports Chat Functionality · United States- SESentryCloud monitoring · United States
SnowflakeData storage and processing · United States, Ireland- TwilioNative Voice + SMS Channel · United States
Security profile
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: AnthropicAnthropic appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: ClickHouse, Inc.ClickHouse, Inc. appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Customer support category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Verint
Customer support
Close the AI outcomes gap with the Verint Open
Next4Biz
Customer support
Customer service platform that unifies every channel, understands and answers tickets with AI, and resolves them through workflows and
Freshworks
Customer support
Freshworks is a cloud-based CEM software suite that streamlines customer conversations across multiple channels including email &
Gorgias
Customer support
Drive more sales and automate support with AI Agent, Helpdesk integrated to your stack, Chat, FAQ and
Evidence against regulations
All regulations for KustomerHow much of each regulation’s vendor requirements Kustomer’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read