Is this your company? Buyers are checking Appcues Inc here. Claim appcues.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Appcues Inc
Sourced from public information. Not yet verified by the company.
Appcues Inc is SOC 2 Type II compliant. Appcues Inc also holds GDPR, CCPA, and HIPAA.
About
Security is built into the fabric of our products, team, infrastructure, and processes, so you can rest assured your data is safeguarded.
Compliance & infrastructure
Subprocessors
7- AAmazon Web Services · Primary infrastructure provider for Appcues applications and servicesUSA & EU
- CClickHouse · Provides managed database services.USA & EU
- CConfluent · Infrastructure provider, managing Apache Kafka as a service.USA & EU
- SSnowflake · Analytics database for calculating aggregate statistics for production.USA & EU
- MMailgun · Used for delivering emails as part of the Appcues out-of-product messaging produUSA & EU
- OOpenAI · Provides AI model services for optional Appcues AI features.USA & EU
- LLangfuse · Provides monitoring and quality testing tools for optional Appcues AI featuresUSA & EU
Compliance leadership
The person who leads Appcues Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Appcues Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
2026 Pentest and Summary of Findings Documents AvailableJun 2026
Appcues’ 2026 Penetration Test Report is now available, as well as the summary of findings document.
EU hosting environment support for AI featuresFeb 2026
AI features are now supported for any customers using the Appcues EU hosting environment. In addition, the Appcues' subprocessor list has been expanded to include OpenAI for EU and Langfuse for EU. Appcues complies with all applicable data protection laws, including GDPR.
EU Hosting EnvironmentJan 2026
Appcues now offers an EU hosting environment. Customers using the EU hosting environment benefit from the same security controls, infrastructure standards, and subprocessors as our US hosting environment, with the following exceptions: - OpenAI processing remains US-based. - HIPAA support is not available in the EU hosting environment. All data in the EU hosting environment implements the same strict security controls as the US hosting environment, and Appcues complies with all applicable data protection laws, including GDPR.
2025 SOC 2 Type 2 Report AvailableDec 2025
Appcues’ 2025 SOC 2 Type 2 report covering the observation period 10/01/2024 to 09/30/2025 is now available on the trust center.
Updates to the Appcues Subprocessor ListOct 2025
At Appcues, protecting the confidentiality and integrity of your data is our top priority. We work exclusively with trusted third-party service providers who meet our rigorous security and privacy standards. We will soon add the following entity to our list of subprocessors: - Langfuse Langfuse will provide monitoring and quality testing tools for Appcues AI features. Langfuse will not be used if your account has opted out of Appcues AI features. We have verified our service providers have the required technical expertise and that they maintain our security and privacy standards. You can view the current list of Appcues Third Party Subprocessors at any time.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Appcues Inc SOC 2 compliant?
Is Appcues Inc GDPR compliant?
Is Appcues Inc CCPA compliant?
Is Appcues Inc HIPAA compliant?
Is Appcues Inc SOC 2 Type I or Type II?
Can I use Appcues Inc's SOC 2 for a vendor risk assessment?
Is Appcues Inc penetration tested?
Is Appcues Inc secure?
Does Appcues Inc have a bug bounty or vulnerability disclosure program?
Who are Appcues Inc's subprocessors?
Where does Appcues Inc host or store data?
Where is Appcues Inc's trust center or security page?
Appcues Links
Why does your chrome extension require access to browser data for all websites?
How do you monitor the health of your service?
How often do you have maintenance windows?
Does the application support Single Sign-On (SSO)? If so, how is it implemented (i.e. SAML)?
What is the service-level agreement (SLA)?
Do you have RTO and RPO metrics?
Do you follow any privacy or security frameworks? (ISO 27001, NIST, SOC-2, etc?)
What is your data retention period?
What is the data retention policy?
What is the software development lifecycle (SDLC), or software change control process?
Has Appcues conducted a Business Impact Analysis (BIA)?
Business & Industrial peers that completed SOC 2
Newsworthy.ai
Octopus Deploy
1099-Prep
