ZoomInfo
Security and trust center evidence
ZoomInfo is the trusted go-to-market platform for businesses to find, acquire, and grow
Summary
ZoomInfo has 2 registry-verified rows and 3 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is ISO/IEC 27001: Vendor states ISO 27001:2013 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
ZoomInfo states on its trust centre that it holds ISO/IEC 27001:2013, a claim recorded as of 19 Sep 2026. ZoomInfo is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ), issued 19 Dec 2023 and confirmed as of 17 Sep 2026. ZoomInfo states on its trust centre that it holds ISO/IEC 27701 and ISO/IEC 27017, both recorded as of 19 Sep 2026. ZoomInfo is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification, SW-US Certification, and UK Extension Certification, issued 5 Jan 2018 and expiring 6 Apr 2027, a status confirmed as of 17 Sep 2026. No public evidence found for SOC 2, HIPAA, FedRAMP, or PCI DSS.
- EU-US Data Privacy Framework: listed as active (EU-US, SW-US, UK Extension Certifications), issued 5 Jan 2018, expires 6 Apr 2027
- CSA STAR: listed in CSA STAR registry, Level 1 self-assessment (CAIQ), issued 19 Dec 2023
- ISO/IEC 27001:2013, 27701, 27017: vendor states on its trust centre, as of 19 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among sales tools vendors
2verified rows
Category median 0, across 49 indexed sales tools vendors. ZoomInfo has more verified rows than 90 percent of them.
b2b datalead generationprospectingsales intelligence
Compare with similar vendors
Pick your own comparisonCompliance grid
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2013 on its trust centre
as of 30 Sep 20263 sources
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
ISO/IEC 27701Vendor-statedVendor states ISO 27701 on its trust centre
as of 30 Sep 20263 sources
ISO/IEC 27017Vendor-statedVendor states ISO 27017 on its trust centre
as of 30 Sep 20263 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20262 sources
Legal artefacts
Subprocessors (28)
- 1A1Mind AI, Inc.Virtual AI chatbot services · USA
- APAdjiva Pte. Ltd. (aka DeltaX)Digital advertising services · Singapore
- AWAmazon Web ServicesCloud hosting and infrastructure services · USA
Amplitude, Inc.Product analytics services · USA
Anthropic, PBCGenerative AI services · USA
BoxDocument hosting and delivery services · USA
Catamorphic Co., dba LaunchDarklyFeature management and testing services · USA
Confluent, Inc.Data streaming services · USA
Databricks, Inc.Data warehouse services · USA
Functional Software, Inc. dba SentryApplication error monitoring services · USA- GIGainsight, Inc.Customer success platform · USA
Google LLCCloud hosting and infrastructure services; Generative AI services · USA
Groq, IncAI services · USA
LangChainAI development and observability services · USA
MongoDB, Inc.Database services · USA
Okta, Inc.Authentication and access management · USA
OpenAI OpCo, LLCGenerative AI services · USA
Outreach CorporationSales engagement services · USA- PLPusher LimitedReal-time messaging services · UK
Salesforce.com Inc.Customer relationship management · USA
Segment.io, Inc.Customer data platform and analytics · USA- SISingleStore, Inc.Database services; Analytics services · USA
Slack Technologies, LLCCollaboration and messaging services · USA
Snowflake, Inc.Data warehouse services · USA
The Trade Desk, Inc.Digital advertising services · USA- TITransloadit-II GmbHFile processing and security services · Germany
Twilio Inc. (Sendgrid)Authentication; Telephony services · USA
Wasabi Technologies LLCData storage services · USA
Security profile
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 19 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 19 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
- 19 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
- 19 Sep 2026Subprocessor added: 1Mind AI, Inc.1Mind AI, Inc. appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Adjiva Pte. Ltd. (aka DeltaX)Adjiva Pte. Ltd. (aka DeltaX) appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Amplitude, Inc.Amplitude, Inc. appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Anthropic, PBCAnthropic, PBC appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: BoxBox appeared on the subprocessor list.
- 19 Sep 2026Subprocessor added: Catamorphic Co., dba LaunchDarklyCatamorphic Co., dba LaunchDarkly appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Sales tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Apollo.io
Sales tools
Apollo is the foundation of your entire go-to-market strategy.
KickFire
Analytics
KickFire is the leader in B2B first-party intent
DataFox
datafox.com
FirstIgnite
AI tools
AI-Powered Business Development for Scientific Organizations
Evidence against regulations
All regulations for ZoomInfoHow much of each regulation’s vendor requirements ZoomInfo’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read