Is this your company? Buyers are checking Fathom here. Claim fathom.video free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Fathom
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Fathom is SOC 2 Type II compliant. Fathom also holds HIPAA, GDPR, and CCPA.
About
If you have any questions check out our FAQ at the bottom of the page or contact [trust@fathom.video](mailto:trust@fathom.video) For system status please visit [status.fathom.video](https://status.fathom.video)
Compliance & infrastructure
Hosting
GCP
Data handled
Calendar Data: Meetings & Attendee EmailsMeeting Content Data: Recording (Audio & Video), TranscriptUser Data: Name, Email, IP, Job Title, Role
Subprocessors
22- GGoogle Cloud Platform · Primary Cloud ProviderUSA
- AAnthropic · AI ProviderUSA
- OOpenAI · AI ProviderUSA
- EElevenLabs · AI ProviderUSA
- EElastic · Search ProviderUSA
- MModal · AI ProviderUSA
- VVoyage AI · AI ProviderUSA
- BBrandfetch · Brand & Logo APIUSA
- CCensus · Data Analytics & ETLUSA
- CCourier · Email ProviderUSA
- CCloudflare · CDNUSA
- FFiveTran · Data Analytics & ETLUSA
Show all 22 subprocessorsShow fewer
- FFront · Helpdesk ProviderUSA
- HHubSpot · CRMUSA
- NNew Relic · Application MonitoringUSA
- PPostmark · Email ProviderUSA
- PPusher · In-App CommunicationUSA
- RRetool · Data Analytics & ETLUSA
- RReveal · Partnership Marketing PlatformBelgium
- SSentry · Application MonitoringUSA
- SStripe · Payment ProcessorUSA
- UUserVoice · Feedback Tracking PlatformUSA
Compliance leadership
The person who leads Fathom's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Fathom's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Subprocessor UpdatesSep 2025
We will use this section to notify customers of any changes to our subprocessors. By subscribing to Trust Center updates, you will automatically receive notifications whenever we add, remove, or modify subprocessors that process customer data.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Fathom SOC 2 compliant?
Fathom is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Fathom HIPAA compliant?
According to Fathom's public trust center, Fathom is HIPAA compliant. On SOC2C this listing is Listed.
Is Fathom GDPR compliant?
According to Fathom's public trust center, Fathom is GDPR compliant. On SOC2C this listing is Listed.
Is Fathom CCPA compliant?
According to Fathom's public trust center, Fathom is CCPA compliant. On SOC2C this listing is Listed.
Is Fathom SOC 2 Type I or Type II?
Fathom is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Fathom's SOC 2 for a vendor risk assessment?
Yes. Fathom's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Fathom penetration tested?
Fathom hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Fathom secure?
Security isn't a single yes/no, but Fathom is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA, GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Fathom have a bug bounty or vulnerability disclosure program?
Fathom hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@fathom.video or via a /security page.
Who are Fathom's subprocessors?
Fathom lists 22 subprocessors on its trust center, including Google Cloud Platform, Anthropic, OpenAI, ElevenLabs, Elastic. Buyers use this for fourth-party risk review.
Where does Fathom host or store data?
Fathom hosts on GCP, and handles Calendar Data: Meetings & Attendee Emails, Meeting Content Data: Recording (Audio & Video), Transcript, User Data: Name, Email, IP, Job Title, Role. Data residency details are on its trust center.
Where is Fathom's trust center or security page?
Fathom's trust center is at https://trust.fathom.video. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Fathom
Reproduced from Fathom's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Do you let AI providers train on customer data?
NO. None of our AI sub-processors (Anthropic, OpenAI, or Google) are contractually permitted to use our users’ data to train their AI models. Fathom uses de-identified customer data to improve the accuracy of our proprietary AI models in order to improve our service for all users. You can opt out of this anytime in your User Settings, and Organizations on Team Edition can opt out all users on their account by going to Organization Settings.
Is data in your platform encrypted both in transit and at rest?
YES, all application data, including recorded, are encrypted both at rest and in transit.
Where do you store data?
All data is stored in the United States. For those customers located in the EU/UK we are GDPR compliant and are happy to sign a DPA. Contact [trust@fathom.video](mailto:trust@fathom.video)
How is Fathom free? Do you sell our data to third parties?
NO, we do not and will never sell your data to third parties. We provide the Fathom app free of charge because it drives usage and brand awareness which generates leads for our Team Edition product.
How long do you store meeting recordings and other customer data?
One key feature of Fathom is that it will retain your recordings and other data indefinitely unless you manually delete individual recordings or your account. Specific retention requirements (e.g. purge all recordings after 2 years) are supported on the Pro plan of our Team Edition product. Sign up for a free trial at https://fathom.video/for/teams
Can we sign a Mutual Non-disclosure Agreement?
Our privacy policy should cover most users' confidentiality requirements, but if you still need an MNDA please use our MNDA request form
Is authentication through SSO? Is multi-factor auth available?
User authentication is via Google / Microsoft sign-in or Single-Sign-On via Okta (both SAML and SCIM are supported). 2FA is supported by all of those upstream authentication providers.
Do you have cybersecurity insurance?
YES, we have $3M in total coverage through Vouch. See our certificate of insurance posted above. If you require additional coverage to use Fathom please contact [trust@fathom.video](mailto:trust@fathom.video)
What happens to my data if I delete my account?
* When you delete your account, all recording data (video, transcripts) and metadata is removed. * After an additional 7 days, all data is gone from our backups as well (transcripts, meeting data, etc)
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public