Conversica is a US-based cloud software technology company, headquartered in San Mateo, California, that provides two-way AI-driven conversational software and a suite of Intelligent Virtual Assistants for businesses to engage customers via email, chat, and SMS.
Summary from Wikipedia.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
CCPA
Publicly advertised on the organization’s trust center.
-
PCI DSS
Payment card industry standard for handling cardholder data securely.
Compliance timeline
-
May 2022
Trust center first observed in public web archives
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Conversica discloses on its trust center. Linked entries have their own profile in the Trust Index.
0% chain trust: 0 of 10 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Data hosting and related processing and security services.
- Google Cloud Data translation, DLP filtering, Vertex for vector embeddings for RAG (chat and AnswersIQ), as well as Gemini language models for various NLP tasks
- OpenAI Natural language generation for Chat, generative AI service features, NLP tasks like classification, and moderation API to filter out harmful/abusive chat messages
- Datadog Converisca Primary Observability Platform
- Twilio SMS (Text Message) services.
- Scanii Security Software that processes and contains files for malware, phishing, spam and other malicious content
- Workato Facilitates personal data transfer via API integration with our customers’ respective CRM databases.
- Zendesk Facilitates technical support plus chat integration and related data transmission.
- Vellum Orchestration, configuration, testing, and monitoring layer for use of third party AI
- AtData (fka Fresh Address) E-mail validation and analytics integration
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
