Skip to main content
Zipline logo

Zipline

Security and trust center evidence

With retail operations software from Zipline, you fulfill all your goals by unifying your entire

getzipline.comLast verified 18 Sep 2026
Request the report Are you Zipline?

Summary

HIPAA mark, CertReports state Vendor-stated as of 18 Sep 2026HIPAAVendor-statedSOC 2 mark, CertReports state Vendor-stated as of 18 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 18 Sep 2026GDPRVendor-statedEU-US Data Privacy Framework mark, CertReports state Verified as of 17 Sep 2026DPFVerifiedCCPA / CPRA mark, CertReports state Vendor-stated as of 18 Sep 2026CCPAVendor-stated

Zipline has 1 registry-verified row and 4 vendor-stated rows in the CertReports index, last verified 18 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Zipline states it holds that it will sign a business associate agreement. Zipline states it holds a SOC 2 Type II report. Zipline states it holds a data processing agreement. Zipline is listed in the Data Privacy Framework list for EU-US Data Privacy Framework (Active: EU-US Certification, UK Extension Certification, SW-US Certification), dated 26 Feb 2025.

  • HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured) (as of 18 Sep 2026)
  • SOC 2: Vendor states SOC 2 Type II on its trust centre (as of 18 Sep 2026)
  • GDPR: Vendor states GDPR on its trust centre (as of 18 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

1verified rows

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (14)

  • Amazon Web Services logo
    Amazon Web ServicesCDN and File Storage · United States, EU, Singapore
  • CD
    Crunchy DataDatabase Hosting · United States, EU, Singapore
  • Datadog logo
    DatadogLogging, Monitoring, and Alerting · United States and EU
  • EL
    elasticSearch · United States, EU, Singapore
  • Fivetran logo
    FivetranData Analytics · United States
  • GC
    Google Cloud PlatformData Warehousing and Analytics · United States and EU
  • HE
    HerokuApplication Hosting · United States, EU, Singapore
  • Intercom logo
    IntercomLive Chat Customer Support · United States
  • LA
    LangFuseAI Observability · United States
  • ME
    MetabaseData Analytics · United States and EU
  • OpenAI logo
    OpenAIInference and Summarization of Content · United States
  • RE
    RedisIn-memory Data Caching · United States, EU, Singapore
  • SE
    SentryLogging, Monitoring, and Alerting · United States
  • SparkPost logo
    SparkPostEmail Delivery · United States and EU

Change history

  1. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
  4. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  5. 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
  6. 18 Sep 2026Subprocessor added: Crunchy DataCrunchy Data appeared on the subprocessor list.
  7. 18 Sep 2026Subprocessor added: DatadogDatadog appeared on the subprocessor list.
  8. 18 Sep 2026Subprocessor added: FivetranFivetran appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: Google Cloud PlatformGoogle Cloud Platform appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: HerokuHeroku appeared on the subprocessor list.