Finsweet is a Webflow agency specializing in design, development, and digital products. Elevate your online presence with our tailored expertise.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
HIPAA
Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Finsweet discloses on its trust center. Linked entries have their own profile in the Trust Index.
64% chain trust: 14 of 22 disclosed subprocessors are themselves in the Trust Index.
- Auth0 Identity & access management
- Cloudflare Security & performance
- Google Cloud Platform Cloud provider
- Stripe Finance and payments
- Airtable Data storage and processing
- Better Stack Uptime Uptime & monitoring
- Checkr Employee management
- Discourse Customer support
- Figma Product and design
- GitHub Version control & DevOps
- Google Analytics Data analytics
- Google Workspace Identity provider
- Loom Collaboration
- OpenAI Engineering
- PostHog Data analytics
- Rewardful Affiliate Marketing
- SendGrid Email marketing
- Slack Collaboration
- Vanta Security & compliance
- Webflow Website development
- Xano Backend as a service
- YouTube Marketing & education
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
