Skip to main content
ThoughtSpot logo

ThoughtSpot

SOC 2 evidence

ThoughtSpot is the Modern Analytics Cloud

thoughtspot.comAnalyticsLast verified 2 Nov 2026
Request the report Are you ThoughtSpot?
SOC 2 mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

ThoughtSpot and SOC 2

ThoughtSpot states it holds a SOC 2 Type II report. CertReports captured this on 2 Nov 2026 from wolfia; it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 2 Nov 2026 · confidence 80%
Kind
Type II
SourceCapturedQuoteLinks
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026SOC 2 Type II
Live page Snapshotsha256 c38a56d48e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 2 Type II
Live page Snapshotsha256 05e324eab8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 2 Type II
Live page Snapshotsha256 2e03a20660
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 2 Type II
Live page Snapshotsha256 8336f5a60b
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 2 Type II
Live page Snapshotsha256 0c6fcd854d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 2 Type II
Live page Snapshotsha256 367dacbc68
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 2 Type II
Live page Snapshotsha256 670afe7ea8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 2 Type II
Live page Snapshotsha256 6f249e803c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 2 Type II
Live page Snapshotsha256 704fcdd543
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 2 Type II
Live page Snapshotsha256 a0fb4b00c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 2 Type II
Live page Snapshotsha256 38c411e3c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 2 Type II
Live page Snapshotsha256 a2b9b35415
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 2 Type II
Live page Snapshotsha256 417a1c4973
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 2 Type II
Live page Snapshotsha256 da54510633
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 2 Type II
Live page Snapshotsha256 9f94a212a5
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 2 Type II
Live page Snapshotsha256 0c26003068
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 2 Type II
Live page Snapshotsha256 80b64ee30e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 2 Type II
Live page Snapshotsha256 c849887168
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 2 Type II
Live page Snapshotsha256 8824b99e2d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 2 Type II
Live page Snapshotsha256 3df39275e1
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 2 Type II
Live page Snapshotsha256 a1cf3b011c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026SOC 2 Type II
Live page Snapshotsha256 995b70170e
This is wrong
VerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 2026 · confidence 100%
Kind
Self-assessment
Issued or listed
16 May 2022
Products in scope
thoughtspot cloud
SourceCapturedQuoteLinks
CSA STAR registry
Official registry · HTTP 200
26 Oct 2026thoughtspot: STAR Level 1 self-assessment (CAIQ)
Live pagesha256 0c3d16dcbd
CSA STAR registry
Official registry · HTTP 200
19 Oct 2026thoughtspot: STAR Level 1 self-assessment (CAIQ)
Live pagesha256 6ebb015031
CSA STAR registry
Official registry · HTTP 200
12 Oct 2026thoughtspot: STAR Level 1 self-assessment (CAIQ)
Live pagesha256 be2cb50e52
CSA STAR registry
Official registry · HTTP 200
5 Oct 2026thoughtspot: STAR Level 1 self-assessment (CAIQ)
Live pagesha256 3b3fda577e
CSA STAR registry
Official registry · HTTP 200
29 Sep 2026thoughtspot: STAR Level 1 self-assessment (CAIQ)
Live pagesha256 aadfa82b54
CSA STAR registry
Official registry · HTTP 200
17 Sep 2026thoughtspot: STAR Level 1 self-assessment (CAIQ)
Live pagesha256 e7f124247f
This is wrong
Vendor-statedVendor states CSA STAR Level 1 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026CSA STAR Level 1
Live page Snapshotsha256 c38a56d48e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 05e324eab8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 2e03a20660
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 8336f5a60b
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 0c6fcd854d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 367dacbc68
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 670afe7ea8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 6f249e803c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 704fcdd543
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 a0fb4b00c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 38c411e3c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 a2b9b35415
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 417a1c4973
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 da54510633
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 9f94a212a5
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 0c26003068
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026CSA STAR Level 1
Live page Snapshotsha256 80b64ee30e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026CSA STAR Level 1
Live page Snapshotsha256 c849887168
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026CSA STAR Level 1
Live page Snapshotsha256 8824b99e2d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026CSA STAR Level 1
Live page Snapshotsha256 3df39275e1
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026CSA STAR Level 1
Live page Snapshotsha256 a1cf3b011c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026CSA STAR Level 1
Live page Snapshotsha256 995b70170e
This is wrong
Vendor-statedVendor states SOC 1 Type II on its trust centre
as of 2 Nov 2026 · confidence 80%
Kind
Type II
SourceCapturedQuoteLinks
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026SOC 1 Type II
Live page Snapshotsha256 c38a56d48e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 1 Type II
Live page Snapshotsha256 05e324eab8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 1 Type II
Live page Snapshotsha256 2e03a20660
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 1 Type II
Live page Snapshotsha256 8336f5a60b
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 1 Type II
Live page Snapshotsha256 0c6fcd854d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 1 Type II
Live page Snapshotsha256 367dacbc68
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 1 Type II
Live page Snapshotsha256 670afe7ea8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 1 Type II
Live page Snapshotsha256 6f249e803c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 1 Type II
Live page Snapshotsha256 704fcdd543
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 1 Type II
Live page Snapshotsha256 a0fb4b00c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 1 Type II
Live page Snapshotsha256 38c411e3c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 1 Type II
Live page Snapshotsha256 a2b9b35415
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 1 Type II
Live page Snapshotsha256 417a1c4973
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 1 Type II
Live page Snapshotsha256 da54510633
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 1 Type II
Live page Snapshotsha256 9f94a212a5
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 1 Type II
Live page Snapshotsha256 0c26003068
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 1 Type II
Live page Snapshotsha256 80b64ee30e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 1 Type II
Live page Snapshotsha256 c849887168
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 1 Type II
Live page Snapshotsha256 8824b99e2d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 1 Type II
Live page Snapshotsha256 3df39275e1
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 1 Type II
Live page Snapshotsha256 a1cf3b011c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026SOC 1 Type II
Live page Snapshotsha256 995b70170e
This is wrong
Vendor-statedVendor states SOC 3 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026SOC 3
Live page Snapshotsha256 c38a56d48e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 3
Live page Snapshotsha256 05e324eab8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 3
Live page Snapshotsha256 2e03a20660
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 3
Live page Snapshotsha256 8336f5a60b
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 3
Live page Snapshotsha256 0c6fcd854d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 3
Live page Snapshotsha256 367dacbc68
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 3
Live page Snapshotsha256 670afe7ea8
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 3
Live page Snapshotsha256 6f249e803c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 3
Live page Snapshotsha256 704fcdd543
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 3
Live page Snapshotsha256 a0fb4b00c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 3
Live page Snapshotsha256 38c411e3c7
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 3
Live page Snapshotsha256 a2b9b35415
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 3
Live page Snapshotsha256 417a1c4973
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 3
Live page Snapshotsha256 da54510633
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 3
Live page Snapshotsha256 9f94a212a5
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 3
Live page Snapshotsha256 0c26003068
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 3
Live page Snapshotsha256 80b64ee30e
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 3
Live page Snapshotsha256 c849887168
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 3
Live page Snapshotsha256 8824b99e2d
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 3
Live page Snapshotsha256 3df39275e1
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 3
Live page Snapshotsha256 a1cf3b011c
ThoughtSpot trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026SOC 3
Live page Snapshotsha256 995b70170e
This is wrong

What is not public

  • The report period is not public, so CertReports cannot say whether the ThoughtSpot SOC 2 report covers the last 12 months.
  • The audit firm is not stated in any public source CertReports has captured.
  • Trust services criteria in scope, carve-outs and bridge-letter status are only in the restricted-use report, which CertReports never hosts.
What SOC 2 means, and what it does not

SOC 2 reports are restricted-use and are never "certifications". A Type II report covers a period; freshness is the period end plus a bridge letter of at most three months. "SOC 2 ready" and "in progress" are not reports. No public SOC 2 registry exists; the strongest registry-grade signal is a CSA STAR Level 2 attestation, then a public SOC 3.

Read the SOC 2 guide and browse all vendors with evidence

Questions buyers ask

Is ThoughtSpot SOC 2 certified?

No organisation is "SOC 2 certified": SOC 2 is an attestation report issued by a CPA firm, not a certification. ThoughtSpot states it holds a SOC 2 Type II report as of 2 Nov 2026.

How do I get the ThoughtSpot SOC 2 report?

SOC 2 reports are restricted-use documents shared under NDA. Request it through the ThoughtSpot trust centre or security page; CertReports links to it and never hosts the report.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 27 Oct 2026Subprocessor added: TwilioTwilio appeared on the subprocessor list.
  2. 27 Oct 2026Subprocessor added: TypeSafe AITypeSafe AI appeared on the subprocessor list.
  3. 27 Oct 2026Subprocessor removed: SendGridSendGrid left the subprocessor list.
  4. 3 Oct 2026Subprocessor added: OktaOkta appeared on the subprocessor list.
  5. 3 Oct 2026Subprocessor added: YouYou appeared on the subprocessor list.

Alternatives with SOC 2 evidence

Similar vendors (shared product tags or the Analytics category) whose SOC 2 row is verified or vendor-stated, ranked by similarity.

Sigma Computing logo

Sigma Computing

Analytics

Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
2 verified · 11 stated2 Nov 2026
Sisense logo

Sisense

Analytics

Sisense delivers AI-powered embedded analytics to unlock insights and convert data into revenue with pro-code, low-code, and no-code

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
5 stated2 Nov 2026
ControlUp logo

ControlUp

Analytics

First generation IT analytics and big data forever changed the IT

SOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 27701 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-stated
2 verified · 6 stated2 Nov 2026
Mixpanel logo

Mixpanel

Analytics

Mixpanel is event analytics for builders that need answers.

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 27701 mark, CertReports state Vendor-stated
2 verified · 6 stated2 Nov 2026
Amplitude logo

Amplitude

Analytics

Digital Analytics Platform

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-stated
1 verified · 7 stated2 Nov 2026
Mouseflow logo

Mouseflow

Analytics

Improve UX and conversions with website behavior analytics! Use session replay, heatmaps, and feedback to improve website user

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 5 stated2 Nov 2026
Clicktale logo

Clicktale

Analytics

The AI-powered Contentsquare platform unlocks insights to engage, convert, and retain with Experience and Product Analytics and Feedback

SOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 5 stated2 Nov 2026
Nuix logo

Nuix

Analytics

Nuix Ltd is an Australian technology company that produces investigative analytics and intelligence software for extracting knowledge from

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 6 stated2 Nov 2026

Understand SOC 2 evidence

All articles