Is this your company? Buyers are checking Calabrio here. Claim calabrio.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Calabrio
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Calabrio is SOC 2 Type II compliant. Calabrio also holds ISO 27001, ISO 42001, PCI DSS, GDPR, CCPA, HIPAA, and FedRAMP.
About
Information Security is of the utmost importance at Calabrio. Our program uses a defense-in-depth strategy to protect customer confidential information. The foundation of our program is the National Institute of Standards and Technology (NIST) cybersecurity framework ([https://www.nist.gov/cyberframework](https://www.nist.gov/cyberframework)), a well-established and comprehensive blueprint for protecting confidential information. We continually monitor and evaluate internal metrics to improve our performance. Calabrio engages outside experts to assess the effectiveness of our program through p
Compliance & infrastructure
Hosting
AWSAzure
Documents
2Subprocessors
20- MMicrosoft Corporation (Used in Operation of the Services) · (“Microsoft Azure” or “Azure”) Hosting Platform / Infrastructure-as-a-Service (ILocation is dependent upon Customer Location: US; UK; Ireland; Netherlands; Australia; Canada; Singapore; Hong Kong; Brazil; and South Africa
- AAmazon Web Services, Inc. (AWS) (Used in Operation of the Services) · Hosting Platform / Infrastructure-as-a-Service (IaaS) and Bedrock Services. CalaThe Data Center is regional selected by Customer: US East, US West, CA Central, EU West and AP South. Montreal, Quebec; US-East (Virginia, USA); US- West (Oregon, USA); Dublin, Ireland; London, Englan
- FForgeRock, Inc. (Used in Operation of the Services) · Identity and Access Management Calabrio uses Forge Rock to offer a single loginLocation is dependent upon Customer US or Germany
- SSpeechmatics (USA), Inc. (Used in Operation of the Services) · Voice-to-Text Transcription. Calabrio uses Speechmatics to obtain transcripts frLocation is dependent upon Customer; US; Ireland; Netherlands
- AAssemblyAI, Inc. (Used in Operation of the Services) · Voice-to-Text Transcription. Calabrio uses AssemblyAI to obtain transcripts fromLocation is dependent upon Customer; US; Ireland
- SSnowflake (Used in Operation of the Services) · Data Warehousing. Calabro uses Snowflake to store redacted transcript, which harRegional based on customer location: Montreal, Quebec US-East (Virginia) US-West (Oregon) Dublin, Ireland London, England Sydney, Australia Singapore
- SSalesforce (SFDC) (Used in Account Management) · Customer Relationship Management, Support Services Case Logging. Calabrio uses SUnited States
- DDocuSign (Used in Account Management) · Document managementUnited States
- PPendo.io, Inc. (Used in Account Management) · User Experience, Product RoadmapUnited States
- PPlanview, Inc. AdaptiveWork (Used in Account Management) · Project Management Software and ServicesUnited States
- SService800 (Used in Account Management) · Post-project SurveysUnited States
- NNetsuite, Inc. (Used in Account Management) · Financial Management and InvoicingUnited States
Show all 20 subprocessorsShow fewer
- GGlobalLogic (Used in Account Management) · Support Services and Development. Calabrio uses GlobalLogic for support servicesIndia
- DDatadog (Used in Account Management) · Infrastructure monitoringUnited States
- MMicrosoft Corporation (Used in Account Management) · Day to day tasks and documentation.United States
- CCalabrio, Inc. · Implementation Services and Support ServicesUnited States
- CCalabrio Canada Ltd. · Implementation Services and Support ServicesCanada
- CCalabrio UK Limited · Implementation ServicesUnited Kingdom
- CCalabrio AB · Implementation Services and Support ServicesSweden
- VVerint Group Companies
Compliance leadership
The person who leads Calabrio's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Calabrio's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Verint Group added as Sub ProcessorMar 2026
_Dear Calabrio Customer,_ _Calabrio/Verint Cloud Platform Evolves_ _As Calabrio & Verint continue to operate a single combined company, we are making enhancements across the Calabrio cloud platform in the coming months. This includes consolidating shared cloud services, upgrading underlying technology components, and streamlining to improve reliability, performance and the overall customer experience. We will continue to comply with data privacy requirements as we make these changes._ _Please see the Calabrio Trust Center for further details._ _You do not need to take any action in response to this notice but should you have any concerns please contact [privacy@calabrio.com](mailto:privacy@calabrio.com "mailto:privacy@calabrio.com")._
AI Principles & FAQ added to trust centerMay 2025
Calabrio has published our AI principles and FAQ to trust.calabrio.com
New sub-processors addedFeb 2025
OpenAi - www.openai.com Anthropic - www.anthropic.com Snowflake - www.snowflake.com
Calabrio Launches Trust CenterFeb 2025
trust.calabrio.com
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Calabrio SOC 2 compliant?
Calabrio is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Calabrio ISO 27001 certified?
According to Calabrio's public trust center, Calabrio is ISO 27001 certified. On SOC2C this listing is Listed.
Is Calabrio ISO 42001 certified?
According to Calabrio's public trust center, Calabrio is ISO 42001 certified. On SOC2C this listing is Listed.
Is Calabrio PCI DSS compliant?
According to Calabrio's public trust center, Calabrio is PCI DSS compliant. On SOC2C this listing is Listed.
Is Calabrio GDPR compliant?
According to Calabrio's public trust center, Calabrio is GDPR compliant. On SOC2C this listing is Listed.
Is Calabrio CCPA compliant?
According to Calabrio's public trust center, Calabrio is CCPA compliant. On SOC2C this listing is Listed.
Is Calabrio HIPAA compliant?
According to Calabrio's public trust center, Calabrio is HIPAA compliant. On SOC2C this listing is Listed.
Is Calabrio FedRAMP compliant?
According to Calabrio's public trust center, Calabrio is FedRAMP compliant. On SOC2C this listing is Listed.
Is Calabrio SOC 2 Type I or Type II?
Calabrio is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Calabrio's SOC 2 for a vendor risk assessment?
Yes. Calabrio's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Calabrio penetration tested?
Calabrio hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Calabrio secure?
Security isn't a single yes/no, but Calabrio is SOC 2 Type II compliant and holds ISO 27001, ISO 42001, SOC 2 Type II, PCI DSS, GDPR, CCPA, HIPAA, FedRAMP. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Calabrio have a bug bounty or vulnerability disclosure program?
Calabrio hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@calabrio.com or via a /security page (Calabrio lists a security contact).
Who are Calabrio's subprocessors?
Calabrio lists 20 subprocessors on its trust center, including Microsoft Corporation (Used in Operation of the Services), Amazon Web Services, Inc. (AWS) (Used in Operation of the Services), ForgeRock, Inc. (Used in Operation of the Services), Speechmatics (USA), Inc. (Used in Operation of the Services), AssemblyAI, Inc. (Used in Operation of the Services). Buyers use this for fourth-party risk review.
Where does Calabrio host or store data?
Calabrio hosts on AWS, Azure. Data residency details are on its trust center.
Where is Calabrio's trust center or security page?
Calabrio's trust center is at https://trust.calabrio.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
What data do we process?
The data we process depends on the personal data the customer inputs into the system and how the customer configures the relevant data fields. Each cloud contract includes a Personal Data processing agreement (DPA), which the data subjects and categories of data, specifying the types of data that may be processed.
Do we process any sensitive data?
The data we process depends on the data the customer chooses to input into the system. If the customer doesn't want any sensitive data to be handled, they must ensure not to upload any.
For what purpose will a Customer’s personal data be transferred to a third country?
This is described in Calabrio’s DPA under Schedule 1 - “Description of Processing”.
Do we process personal data as a controller or as a processor?
According to the DPA, Calabrio, its sub processors, and the customer may act as either controllers or processors.
Does the Solution result in the transfer of personal data to a country outside of EU/EEA
Please refer to Calabrio’s list of sub processors, which can be accessed via My Trust Center.
What transfer mechanism do we rely on when transferring personal data to a third country?
Calabrio relies on EU Standard Contractual Clauses (2021/914/EU) when transferring data to a third country.
How long is the data stored?
Customer has the ability to manage deletion of personal data. For more information, please refer to the DPA and Calabrio's retention policy, which can be found on My Trust Center.
Are there any sub processors?
Customers can find our list of sub processors in the DPA and/or by logging into My Trust Center.
How does Calabrio define AI?
An AI tool is one that has the capability to infer, meaning that outputs—such as predictions, content, recommendations, or decisions—are derived via inference from inputs or data. This is distinct from traditional systems, including certain machine learning processes, which produce outputs based on programmatic and similar approaches. Calabrio evaluates each of its tools and uses best judgment to determine when a software tool is considered to be AI.
Who owns Calabrio customer data?
Customers own their data. We do not share your data with other customers or third parties without your explicit permission. This includes any output generated from the use of our products—output based on your data remains your property. Furthermore, we retain your data only as permitted by our Data Retention Policy and the Master Services Agreement (MSA) between you and Calabrio. We will not transfer your data without your authorization. Our MSA includes Data Protection terms that govern our products, including those incorporating AI.
How does Calabrio support customers adopting AI at their own pace?
We understand that you may not be ready to adopt certain product features that utilize AI. Wherever possible, we provide you with the option to deactivate specific AI features within our products.
Is customer data used to train AI models?
Interaction Summary/AutoQM/Sentiment/Custom Tags: Customer data is not used for training the generic ML models. AWS Bedrock LLM calls are stateless and do not use or store customer data for model improvement. Trending Topics: We use customer-specific concepts (keywords, direct transcripts) to train the model to detect topics.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public