Outreach

Security and trust center evidence

Outreach provides a Software as a Service (SaaS) sales acceleration

outreach.io Sales toolsLast verified 2 Nov 2026

Request the report Are you Outreach?

GDPRVendor-stated

CSA STARVerified

DPFVerified

Outreach has 2 registry-verified rows and 1 vendor-stated row in the CertReports index, last verified 2 Nov 2026. The strongest row is GDPR: Vendor states GDPR on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Outreach states GDPR on its trust centre as of 29 Sep 2026. Outreach is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) submitted 13 Aug 2016, as of 17 Sep 2026. Outreach is listed in the EU-US Data Privacy Framework registry with active EU-US, Swiss-US, and UK Extension certifications issued 3 Nov 2016 and expiring 23 Aug 2027, as of 17 Sep 2026. No public evidence found for SOC 2 for Outreach as of 29 Sep 2026. No public evidence found for ISO/IEC 27001 for Outreach as of 29 Sep 2026.

States GDPR on its trust centre as of 29 Sep 2026 - vendor statement, not independently verified
Listed in the CSA STAR registry, Level 1 self-assessment (CAIQ) submitted 13 Aug 2016, as of 17 Sep 2026
Listed in the EU-US Data Privacy Framework registry, active certification expiring 23 Aug 2027, as of 17 Sep 2026; no public evidence found for SOC 2 or ISO/IEC 27001 as of 29 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Sep 2026; it is regenerated whenever a row changes.

Among sales tools vendors

2verified rows

Category median 0, across 49 indexed sales tools vendors. Outreach has more verified rows than 90 percent of them.

engagement-platformrevenue-intelligencesales-accelerationsales-automation

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, FedRAMP, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.

Subprocessors

No subprocessor list captured yet.

Change history

22 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
22 Sep 2026Trust centre movedTrust centre URL is now https://www.outreach.ai/.
19 Sep 2026Trust centre movedTrust centre URL is now https://www.outreach.ai/platform/trust.