Marketing has an AI operating system. Pencil aggregates every AI model, enforces enterprise governance, and turns production savings into media growth.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
PCI DSS
Payment card industry standard for handling cardholder data securely.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Trypencil discloses on its trust center. Linked entries have their own profile in the Trust Index.
55% chain trust: 11 of 20 disclosed subprocessors are themselves in the Trust Index.
- Adobe (Adobe Systems Software Ireland Limited and Adobe Inc.)
- Amazon Web Services, Inc.
- Bria Artificial Intelligence Limited
- Cloudconvert Document management
- Cloudflare, Inc.
- Datalogics, Inc. (pdfRest) Data storage and processing
- Google, LLC
- Intercom, Inc.
- MacWeb Cloud provider
- OpenAI, L.L.C.
- Pipedream, Inc.
- Plainly Ltd Cloud provider
- Runway AI, Inc.
- Sampark Inc. (Composio)
- Topaz Labs LLC
- Features & Labels, Inc. Cloud provider
- Eleven Labs Inc Cloud provider
- Anthropic Ireland, Limited Cloud provider
- Nanonoble Pte. Ltd (MiniMax) Provider of third party AI models available in the Platform (including certain generation and processing related features)
- Gradual Hosting and operation of Pencil's online community platform.
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
