Pendo feeds product context to the apps and AI agents you build or buy, so you can understand your users, act where it counts, and drive adoption and revenue.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
PCI DSS
Payment card industry standard for handling cardholder data securely.
-
HIPAA
Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
CCPA
Publicly advertised on the organization’s trust center.
-
EU-US DPF
Publicly advertised on the organization’s trust center.
-
TX-RAMP
Texas state authorization program for cloud products used by state agencies.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Pendo discloses on its trust center. Linked entries have their own profile in the Trust Index.
67% chain trust: 6 of 9 disclosed subprocessors are themselves in the Trust Index.
- Google Cloud Platform Hosting provider, CDN, and AI-enabled functionality.
- Amazon Web Services CDN and Email routing
- OpenAI AI-enabled functionality
- Elastic.co Search provider
- Core10 Professional service provider
- Microsoft Azure AI-enabled functionality with Azure OpenAI
- Tray.ai Data integration functionality
- LangChain Monitoring and Evaluation of AI product Features
- Anthropic Claude AI-enabled functionality
Named as a subprocessor by
Organizations in the Trust Index that disclose Pendo as a subprocessor.
- Accountsiq
- Amilia
- Aurorasolar
- Beamery
- Bettercloud
- Bts
- Chartbeat
- Dozuki
- Eventionllc
- Folkshr
- Getencircle
- Getsunlight
- Glamox
- Humahr
- Iprally
- Landytech
- Momentum
- Omniaretail
- Panopto
- Pantheon
- Parentsquare
- Patsnap
- Pluvo
- Predictiveindex
- Restaurant365
- Rimsys
- Rosterfy
- Scaledagile
- Trooptravel
- Velloxgroup
- Webexpenses
- Xurrent
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
