GetWhy is a strategic qualitative research partner that helps enterprise insight teams influence high-stakes decisions at the speed of the business.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties GetWhy discloses on its trust center. Linked entries have their own profile in the Trust Index.
85% chain trust: 11 of 13 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Cloud provider
- Google LLC Audio transcription, natural language processing (English language studies)
- Microsoft Corporation Audio transcription, natural language processing (Non-English language studies)
- Typeform SL Participant qualification
- Twilio Inc Video and audio recording (Moderated interviews)
- BambooHR Employee management
- Bitbucket Version control
- Entra (Office 365) Identity provider
- Google Drive Document management
- Google Workspace Identity provider
- Intercom Customer support
- Intune (Microsoft Endpoint Manager)
- IT Supporters IT
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
