Security certifications of the tools we compare
Which of the 41 tools hold each certification, read from each vendor's own trust, security or legal page and checked Oct 29 and 30, 2026. A filled cell links to that page. These are the tools' certifications, not zazachat's.
- SOC 2 Type II 28 of 41. A Type II audit report.
- GDPR 34 of 41. A data processing agreement (DPA) offered.
- ISO 27001 15 of 41. Certified, information security.
- HIPAA 19 of 41. A business associate agreement (BAA) available. Often on some plans only, so check the plan.
- ISO 42001 4 of 41. Certified, AI management system.
- AIUC-1 3 of 41. Certified, the AIUC-1 standard for AI agents.
| Tool | SOC 2 Type II | GDPR | ISO 27001 | HIPAA | ISO 42001 | AIUC-1 |
|---|---|---|---|---|---|---|
 Ada | Held | Held | Not found | BAA mentioned, terms not stated | Not found | Held |
 Botpress | Held | Held | Not verified | Claimed, no BAA stated | Not verified | Not verified |
 Chatbase | Held | Held | Not verified | Held | Not verified | Not verified |
 Chatfuel | Not found | Held | Not found | Held | Not found | Not found |
 Collect.chat | Not found | Claimed, no DPA found | Not found | Not found | Not found | Not found |
 Confluence | Held | Held | Held | Held | Limited scope | Not found |
 Crisp | Not audited | Held | Aligned, not certified | Not found | Not found | Not found |
 Decagon | Held | Claimed, no DPA found | Held | Listed, no BAA stated | Not found | Not found |
 Document360 | Held | Held | Held | BAA mentioned, terms not stated | Not found | Not found |
 Drag | Type not stated | Claimed, no DPA found | Not verified | Not verified | Not verified | Not verified |
 Fin (formerly Intercom) | Held | Held | Held | Held | Held | Held |
 Forethought | Held | Held | Not verified | Claimed, no BAA stated | Not verified | Not verified |
 Freshchat | Held | Held | Held | Held | Not found | Not found |
| Freshdesk | Held | Held | Held | Held | Not found | Not found |
 Front | Held | Held | Held | Held | Not found | Not found |
 Gmelius | Held | Held | Host or processor only | Held | Not found | Not found |
 Gorgias | Held | Held | Not found | Held | Not found | Not found |
 Guru | Held | Claimed, no DPA found | Not found | Held | Not found | Not found |
 Help Scout | Held | Held | Not found | Held | Not found | Not found |
 Helpjuice | Type not stated | Held | Not found | Not found | Not found | Not found |
 Hiver | Held | Held | Held | Claimed, no BAA stated | Not verified | Not verified |
 HubSpot Service Hub | Held | Held | Not certified | Held | Not found | Not found |
| Jira Service Management | Held | Held | Held | Held | Limited scope | Not found |
 Keeping | Held | Claimed, no DPA found | Not found | Held | Not found | Not found |
 KnowledgeOwl | Not audited | Held | Host or processor only | Held | Not found | Not found |
 Landbot | Type not stated | Held | Not verified | Not verified | Not verified | Not verified |
 LiveAgent | Not audited | Held | Conflicting | No BAA stated | Not found | Not found |
 LiveChat | Held | Held | Not found | Conflicting | Not found | Not found |
 LiveHelpNow Owned by Michael Kansky, who also owns this site. | Host or processor only | Claimed, no DPA found | Not found | BAA mentioned, terms not stated | Not found | Not found |
 ManyChat | Not verified | Not verified | Not verified | Not verified | Not verified | Not verified |
 Missive | Held | Held | Not found | No BAA | Not found | Not found |
 Olark | Not found | Held | Not found | No BAA | Not found | Not found |
 Salesforce Agentforce | Held | Held | Held | Held | Held | Not found |
 Sierra | Held | Held | Held | Listed, no BAA stated | Held | Held |
 Smartsupp | Not found | Held | Not found | Not found | Not found | Not found |
 Tawk.to | Not found | Held | Not found | Not found | Not found | Not found |
 Tidio | Held | Held | Not found | No BAA | Not found | Not found |
 Voiceflow | Held | Held | Held | BAA mentioned, terms not stated | Not verified | Not verified |
 Zendesk | Held | Held | Held | Held | Held | Not found |
 Zoho Desk | Held | Held | Held | Held | Not found | Not found |
| Zoho SalesIQ | Held | Held | Held | Held | Not found | Not found |
A cell that is not marked Held says what the vendor's pages showed instead: not found, not verified (the page could not be read), host or processor only, not audited, or a claim without the report. Only Held is counted. Checked Oct 29 and 30, 2026.
Held means the vendor's own page says so. We do not audit vendors or check their certificates, and a vendor's status can change after the date above. Before you rely on a certification, ask the vendor for the current report or certificate. Found a mistake? Tell us and we will correct it. See our terms of use.