Whalesync
Security and trust center evidence
Manage your website from your favorite tools like Airtable and Notion
Summary
Whalesync has 3 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 3 vendor-stated rows for Whalesync, drawn from its trust centre (Vanta). Whalesync states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report and a data processing agreement, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, PCI DSS and FedRAMP as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
- SOC 2: Vendor states SOC 2 Type II on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among data platforms vendors
0verified rows
Category median 0, across 69 indexed data platforms vendors. Whalesync has no registry-verified row yet, like 51 percent of them; its evidence is vendor-stated or reported.
app integrationdata syncno-code integrationworkflow automation
Compare with similar vendors
Pick your own comparisonCompliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 21 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
Subprocessors (15)
- CLClerkUnited States
Google Cloud PlatformUnited States and Europe- Google DriveUnited States
- Google WorkspaceUnited States
HubSpotUnited States
IntercomUnited States- LALaunchDarklyEngineering
LinearUnited States
NotionUnited States
PostHogUnited States
SendGridEngineering
SlackUnited States
StripeUnited States
VantaUnited States
ZoomUnited States
Security profile
- Pen test cadence
- annual
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Data platforms category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Azuqua
Productivity
Azuqua helps people integrate their applications and automate their business-critical processes without code or specialized
Tray.ai
No-code and automation
Tray.ai is the AI-native enterprise iPaaS for building AI agents, governing Model Context Protocol (MCP), and integrating 700+ apps —
Neon
Data platforms
The backend for apps and
Aerospike
Data platforms
Aerospike is the real-time database for AI, trusted in the
Evidence against regulations
All regulations for WhalesyncHow much of each regulation’s vendor requirements Whalesync’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read