Rocket Lawyer
Security and trust center evidence
Rocket Lawyer makes the law affordable and
Summary
Rocket Lawyer has 4 vendor-stated rows, and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Rocket Lawyer states on its trust centre that it holds a SOC 2 report, as of 30 Sep 2026. Rocket Lawyer also states on its trust centre that it meets GDPR requirements and follows the PCI DSS SAQ A level, as of 30 Sep 2026. Rocket Lawyer also states on its trust centre that it addresses CCPA/CPRA requirements, as of 30 Sep 2026. Rocket Lawyer's EU-US Data Privacy Framework listing is marked inactive in the registry, with the record originally issued 29 Nov 2018, as of 29 Sep 2026. No public evidence found for ISO/IEC 27001 or HIPAA as of 30 Sep 2026.
- SOC 2, GDPR, PCI DSS (SAQ A), CCPA/CPRA: vendor states on its trust centre (as of 30 Sep 2026)
- EU-US Data Privacy Framework: listed as inactive, record issued 29 Nov 2018 (as of 29 Sep 2026)
- ISO/IEC 27001, HIPAA: no public evidence found (as of 30 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 3 Oct 2026; it is regenerated whenever a row changes.
Among productivity vendors
0verified rows
Category median 0, across 65 indexed productivity vendors. Rocket Lawyer has no registry-verified row yet, like 74 percent of them; its evidence is vendor-stated or reported.
business incorporationdocument automatione-signaturelegal templates
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 30 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 30 Sep 20262 sources
PCI DSSVendor-statedVendor states PCI DSS - SAQ A on its trust centre
as of 30 Sep 20262 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 26 Oct 20263 sources
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 30 Sep 20262 sources
Legal artefacts
Subprocessors (6)
ChargebeePayments
Google Cloud PlatformCloud provider · US, EU
SalesforceSales- SPSpreedlyPayments
StripePayments
YunoPayments
Change history
- 29 Sep 2026EU-US Data Privacy Framework state changedState moved from Verified to Expired.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: ChargebeeChargebee appeared on the subprocessor list.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: SalesforceSalesforce appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: SpreedlySpreedly appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: StripeStripe appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: YunoYuno appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Productivity category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
PandaDoc
E-signature
PandaDoc is an American software company that provides SaaS software
AIRSLATE
No-code and automation
We build automation products that keep work
Templafy
Productivity
Agentic enterprise document generation for better consistency, higher quality, and faster document
DFinery
Productivity
Waiver Master. Paperless Cloud. Sign documents, register members, streamline business.
Evidence against regulations
All regulations for Rocket LawyerHow much of each regulation’s vendor requirements Rocket Lawyer’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read