Timefold

Timefold publicly advertises 3 compliance frameworks through a trust center hosted by Vanta.

AI & Machine Learning

3

Advertised frameworks

Vanta

Trust center platform

August 2025

First observed

~2 yrs

Founding to trust center

Timefold is a Belgian software company that provides a platform for automated planning and scheduling optimization. It is headquartered in Ghent, Belgium.

Summary from Wikipedia.

Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

  • ISO 27001

    International standard for an information security management system, certified by accredited bodies.

  • SOC 2

    Independent CPA audit of controls for security, availability, and confidentiality.

  • GDPR

    Public claim of alignment with the EU General Data Protection Regulation.

Compliance timeline

  1. 2023

    Company founded

  2. August 2025

    Trust center first observed in public web archives

  3. September 8, 2026

    Posture last observed by Trust Index

Roughly 2 years elapsed between founding and the earliest archived capture of a public trust center. Archive coverage is incomplete, so the page may have existed earlier.

Subprocessors

Third parties Timefold discloses on its trust center. Linked entries have their own profile in the Trust Index.

70% chain trust: 7 of 10 disclosed subprocessors are themselves in the Trust Index.

  • Google Cloud Platform Cloud infrastructure and hosting services
  • Cloudflare Content delivery network (CDN) and security
  • Auth0 Authentication and user identity management
  • MongoDB Atlas Data storage and processing
  • HubSpot Customer relationship management (CRM) and marketing automation
  • Amplitude Product and user analytics
  • CloudAMQP Message queue and event processing
  • Exact Accounting and financial administration
  • Google Workspace Internal productivity, communication and Identity provider
  • Resend Transactional email delivery

About this data

The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.

More in AI & Machine Learning

How can we work together

Schedule a discovery session

A complimentary, exploratory meeting to discuss your business goals and challenges, identify potential solutions, and determine if our services align with your needs.

Hire us for a project

Augmenting a specific initiative or project, leveraging our expertise and resources to deliver a defined outcome.

Retain us long term

Ongoing collaboration and support through regular meetings, check-ins, and access to our team's collective knowledge and experience, empowering you to make informed decisions and drive sustained growth.