Deepnote

Deepnote publicly advertises 4 compliance frameworks through a trust center hosted by Vanta.

Data & Analytics

4

Advertised frameworks

Vanta

Trust center platform

February 2023

First observed

Founding to trust center

Explore data with Python & SQL, work together with your team, and share insights that lead to action — all in one place with Deepnote.

Summary from the company’s website.

Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

  • SOC 2

    Independent CPA audit of controls for security, availability, and confidentiality.

  • GDPR

    Public claim of alignment with the EU General Data Protection Regulation.

  • CCPA

    Publicly advertised on the organization’s trust center.

  • HIPAA

    Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.

Compliance timeline

  1. February 2023

    Trust center first observed in public web archives

  2. September 8, 2026

    Posture last observed by Trust Index

Subprocessors

Third parties Deepnote discloses on its trust center. Linked entries have their own profile in the Trust Index.

68% chain trust: 13 of 19 disclosed subprocessors are themselves in the Trust Index.

  • Amazon Web Services Cloud infrastructure
  • Anthropic AI services
  • Open AI AI services
  • Google Cloud Platform Cloud infrastructure
  • Google Workspace Productivity & communication tools
  • ChartMogul Revenue analytics
  • HubSpot CRM & marketing automation
  • Intercom Customer support
  • ProductBoard Product management
  • Stitch Data pipelines (ETL)
  • Stripe Payment processing
  • WorkOS Authentication (SSO, SCIM)
  • Microsoft Azure Cloud infrastructure & AI
  • Mailgun Transactional email
  • Sentry Error monitoring
  • Sprig Product feedback
  • Hetzner Cloud Cloud infrastructure
  • Mistral AI AI Service
  • PostHog Product analytics

Named as a subprocessor by

Organizations in the Trust Index that disclose Deepnote as a subprocessor.

About this data

The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.

More in Data & Analytics

How can we work together

Schedule a discovery session

A complimentary, exploratory meeting to discuss your business goals and challenges, identify potential solutions, and determine if our services align with your needs.

Hire us for a project

Augmenting a specific initiative or project, leveraging our expertise and resources to deliver a defined outcome.

Retain us long term

Ongoing collaboration and support through regular meetings, check-ins, and access to our team's collective knowledge and experience, empowering you to make informed decisions and drive sustained growth.