Is this your company? Buyers are checking Arrows here. Claim arrows.to free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Arrows
Sourced from public information. Not yet verified by the company.
Arrows is SOC 2 Type II compliant. Arrows also holds GDPR.
About
Digital sales rooms and customer onboarding plans built for teams that run on HubSpot. Since day one, security has been a top priority at Arrows. This trust center provides an overview of the data security practices and procedures we've implemented.
Compliance & infrastructure
Documents
3Subprocessors
20- HHeroku · Application hostingUSA
- AAmazon Web Services · Customer file hostingUSA
- SSegment · Product analyticsUSA
- PPostmark · Application email serviceUSA
- HHubSpot · CRM and email marketingUSA
- SSentry · Application error tracking, metrics, and loggingUSA
- MMetabase · Product analyticsUSA
- HHightouch · Data ETL toolUSA
- SSlack · Internal communicationUSA
- OOpenAI · Provider for backend support of AI-powered functionalityUSA
- AAnthropic · Provider for backend support of AI-powered functionalityUSA
- HHotjar · Product analyticsEU (Ireland)
Show all 20 subprocessorsShow fewer
- GGoogle Workspace · Email communicationsUSA
- GGoogle Analytics · Marketing analyticsUSA
- GGoogle Cloud Platform · Provider for backend support of AI-powered functionalityUSA
- GGrain · Video recordingUSA
- CCloudflare · Web application firewallGlobal
- FFront · Customer supportUSA
- PParallel · Web scraping and searchUSA
- PPlanetScale · Application databaseUSA
Compliance leadership
The person who leads Arrows's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Arrows's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Subprocessor updateMar 2026
We are adding a new subprocessor: - PlanetScale: Application database You can view our full list of subprocessors at https://trust.arrows.to/subprocessors
AI Trust & Security Overview has been updatedMar 2026
We have updated our *AI Trust & Security Overview* with clarified language and refreshed details. No material policy changes were made.
Subprocessor updateJan 2026
We are updating our list of subprocessors as follows: Added: - Cloudflare: Web application firewall - Front: Customer support - Parallel: Web scraping and search Removed: - Fathom: Call recording These subprocessors may process limited customer data as part of delivering our services. You can view our full list of subprocessors at https://trust.arrows.to/subprocessors
New Resource Uploaded – AI Trust & Security OverviewApr 2025
We’ve added a new document outlining how we securely develop and use AI features in Arrows. The _AI Trust & Security Overview_ is now available under “Resources” in our Trust Center. As always, let us know if you have any questions!
Subscribe to Updates From Arrows’ Trust CenterApr 2025
You can now subscribe to updates from Arrows’ Trust Center to be notified about changes to our compliance and security program. We’ll use this channel to share key updates like new security documentation, upcoming subprocessor changes, and developments in our security and privacy practices.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Arrows SOC 2 compliant?
Is Arrows GDPR compliant?
Is Arrows SOC 2 Type I or Type II?
Can I use Arrows's SOC 2 for a vendor risk assessment?
Is Arrows penetration tested?
Can I get Arrows's SOC 2 report?
Is Arrows secure?
Does Arrows have a bug bounty or vulnerability disclosure program?
Who are Arrows's subprocessors?
Where does Arrows host or store data?
Where is Arrows's trust center or security page?
Business & Industrial peers that completed SOC 2
Octopus Deploy
Newsworthy.ai
1099-Prep
