Trust Centre
Everything a security review asks for, in one place.
Certifications, data handling, sub-processor disclosure and how to request the documents behind them — request what you need, or read the summary below.
Certifications & attestations
SOC 2 Type II
Report under NDA
ISO/IEC 27001
ISMS certificate on request
ISO/IEC 27701
Privacy controls aligned to the extension
Regional compliance
Built to operate under the major privacy regimes
GDPR · UK GDPR
EU/UK — SCCs, DPA, data residency
CCPA / CPRA
California — consumer rights, opt-out signals
India DPDP Act
Local processing and consent
Brazil LGPD
Lawful basis, DPO contact
Canada PIPEDA
Consent and breach reporting
Australia Privacy Act
Handling aligned to the APPs
Data handling
The short version of how your data is treated
Encrypted end to end
TLS 1.2+ in transit, AES-256 at rest. Full detail on /security.
Minimum data to the model
Agents operate on the least context required; identifiers are tokenised before inference.
Data residency
Regional deployment keeps data in the geography you choose.
Immutable audit logs
Data access, configuration changes and agent decisions are all on the record.
Documents
Get what your reviewer needs
- 01
Tell us what you need
The SOC 2 report, the ISO 27001 certificate, a DPA, the sub-processor list, or a completed security questionnaire (CAIQ, SIG or your own).
- 02
Sign an NDA if required
The SOC 2 report ships under a standard mutual NDA. Everything else is available without one.
- 03
Receive it directly
Documents go to your named reviewer by email, usually within one business day. Start at hello@goengage.ai.
Sub-processors
Every sub-processor is disclosed, not buried
The current sub-processor list — who we use, what they do, and where they process data — is available on request and reviewed whenever a vendor changes. Nothing is added to it silently.
Architecture detail — encryption, tenant isolation, access control and how the platform performs under load — is covered in full on /security and /platform/scale-and-security. This page is the compliance summary and the document request point; those are the technical depth.
FAQ
Questions teams ask
How do we start a security review?
Email hello@goengage.ai or use the request flow above. You will get the SOC 2 report under NDA, the ISO 27001 certificate, a DPA and the sub-processor list.
Do you complete security questionnaires?
Yes — send us your CAIQ, SIG or internal questionnaire and we will complete it against the same answers on this page.
Where do I report a security concern?
Email hello@goengage.ai. Security reports are triaged first.
See it decide on your data.
A short working session on your customers, your channels and one outcome you want to move. No slideware.