Rally is agentic research infrastructure that enables teams to run user research with the right people, at the right moments, without losing the safeguards enterprise teams need.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
CCPA
Publicly advertised on the organization’s trust center.
-
HIPAA
Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Rallyuxr discloses on its trust center. Linked entries have their own profile in the Trust Index.
67% chain trust: 14 of 21 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Primary Cloud Provider
- Elastic ElasticSearch Cloud Provider
- Datadog Application Monitoring
- Nylas Email and Calendar API for Google and Microsoft
- Knock Notifications API
- Mailgun Email Service Provider
- Mux Video Live Streaming Infrastructure API
- OneSchema CSV Importing API
- Posthog Product Usage Logging
- Postmark Email Service Provider
- Recall.ai Meeting Bot API
- Tremendous Gift Card API
- WorkOS SSO API
- Intercom Customer support
- Anthropic LLM Provider
- OpenAI LLM Provider
- Google Cloud LLM Provider (Gemini)
- Twilio SMS Sending
- Pylon Customer Support Ticketing and Requests
- Temporal Workflow Orchestration
- Langchain AI Observability
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
