Intercom
Certifications & attestations
| Certification | Status | Source | Last verified |
|---|---|---|---|
| SOC 2 Type II Report self-serve via trust.intercom.com (access request required). | Verified | vendor source ↗ | June 10, 2026 |
| ISO 27001 ISO 27001:2022. Also holds ISO 27018, ISO 27701, and ISO/IEC 42001:2023 (AI management). | Verified | vendor source ↗ | June 10, 2026 |
| HIPAA HIPAA attestation report available via trust center. | Verified | vendor source ↗ | June 10, 2026 |
| HDS French health-data hosting framework, listed among Intercom's compliance frameworks. | Verified | vendor source ↗ | June 10, 2026 |
→ Direct answer: Does Intercom have SOC 2?
Subprocessors
Subprocessor extraction for Intercom is pending.
Hosting & data residency
- InfrastructureAmazon Web Services
- Data residencyRegional hosting (EU/AU) available (vendor-published claim; not restated on the compliance article — pending region-page confirmation).
Trust documents & links
- Trust centerhttps://trust.intercom.com
- Security pagehttps://www.intercom.com/help/en/articles/264-security-at-intercom
- DPAnot yet recorded
- Status pagehttps://www.intercomstatus.com
Security incidents & disclosures
No incidents on record in the public sources we track, as of June 10, 2026. Absence of a record is not a guarantee — see methodology.
Change history
2026-06-10
Vendor added to StackPosture — initial snapshot from published trust documentation. Verification pass pending.
2026-06-10
Verification pass: SOC 2 Type II, ISO 27001:2022 (plus 27018/27701/42001), HIPAA attestation, and HDS confirmed against Intercom's compliance documentation article. www.intercom.com/security now redirects to the Vanta-hosted trust center at trust.intercom.com; security page URL updated to the persistent help-center article.