Skip to main content
Segment logo

Segment

Security and trust center evidence

Software and APIs to collect, clean, and control customer data.

segment.comData platformsLast verified 2 Nov 2026
Request the report Are you Segment?

Summary

HIPAA mark, CertReports state Vendor-stated as of 2 Nov 2026HIPAAVendor-statedSOC 2 mark, CertReports state Vendor-stated as of 2 Nov 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 2 Nov 2026GDPRVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27001Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 2 Nov 2026DPFExpiredCCPA / CPRA mark, CertReports state Vendor-stated as of 2 Nov 2026CCPAVendor-stated

Segment has 7 vendor-stated rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Segment states on its trust centre that it holds SOC 2, as of 18 Sep 2026. Segment states on its trust centre that it displays a HIPAA badge, described as a claim with BAA availability not yet captured, as of 18 Sep 2026. Segment states on its trust centre that it addresses GDPR and CCPA / CPRA, as of 18 Sep 2026. Segment states on its trust centre that it holds ISO/IEC 27001, ISO/IEC 27017:2015, and ISO/IEC 27018:2019, as of 18 Sep 2026. Segment's EU-US Data Privacy Framework record shows Inactive status, originally issued 2 Aug 2018, as of 17 Sep 2026.

  • SOC 2: vendor-stated on trust centre only, as of 18 Sep 2026; no Type II designation given.
  • HIPAA: badge displayed on trust centre is a vendor claim; BAA availability not captured, as of 18 Sep 2026.
  • EU-US Data Privacy Framework: Inactive, originally issued 2 Aug 2018, as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among data platforms vendors

0verified rows

Category median 0, across 69 indexed data platforms vendors. Segment has no registry-verified row yet, like 51 percent of them; its evidence is vendor-stated or reported.

cdpcustomer-datadata-collectiondata-unification

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.

Change history

  1. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  6. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  7. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Data platforms category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Hightouch logo

Hightouch

Marketing

The leading Composable CDP and AI Decisioning platform

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 5 stated2 Nov 2026
Neo4j logo

Neo4j

Data platforms

Neo4j is a graph database management system developed by Neo4j

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedSOC 3 mark, CertReports state Vendor-stated
2 verified · 9 stated2 Nov 2026
Treasure Data logo

Treasure Data

Data platforms

Treasure Data is the only enterprise CDP you need to power exceptional experiences from every part of your customer data

CSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
2 verified2 Nov 2026
Polytomic logo

Polytomic

Data platforms

No-code data syncing between your systems

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedCCPA mark, CertReports state Vendor-stated
3 stated21 Sep 2026

Evidence against regulations

All regulations for Segment

How much of each regulation’s vendor requirements Segment’s public evidence reaches.

Reviewing a vendor on public evidence

All articles