intercom Inc

Intercom is now among the first companies certified under AIUC-1, the new global benchmark for responsible AI. This certification isn’t compliance for compliance’s sake. It gives every business using Intercom confidence that our AI is safe, resilient, and built to the highest level of accountability. Achieving it required independent, enterprise-grade testing of our AI systems, ensuring safety, reliability, and strong protections against issues like hallucinations and brand risk. It confirms that Intercom’s long-standing commitment to trust fully extends to Fin. And it gives every business using Intercom confidence that our AI won’t make unsafe choices, leak data, or behave unpredictably. 🔗 Read the full blog post on our AIUC-1 certification and what it means for Intercom customers here or check out our AIUC-1 certification report in the Trust Center here.

We’ve identified phishing campaigns impersonating Intercom, targeting customers’ support addresses. ⚠️ Intercom has not sent any emails about MFA-related incidents. Be alert for lookalike domains such as send\[.\]intercorn\[.\]com. Attackers are using legitimate email-sending services, which can allow these messages to reach inboxes. If you receive an unexpected email that appears to come from Intercom: - ✅ Check the sending domain — never trust a display name. - ⏳ Be cautious of urgency — phishing relies on pressure and fear. - 💬 Confirm via another channel — you can always reach us through the Intercom Messenger. - 🛑 Pause if something feels off — even a brief moment of caution helps. 🔗 Learn more and see examples in our help article: Oct 2025: Malicious phishing targeting Intercom customers

We’ve introduced a new way to authenticate users in the Messenger, using JSON Web Tokens (JWTs). With JWTs, you benefit from: - ✅ Data protection — Sign and protect both user ID and email, along with any other user attributes. - ✅ Short-lived tokens — JWTs can be set to expire, reducing the risk of misuse for compromised tokens. If your Messenger is in an insecure state, there's no better time to secure things. An insecure Messenger puts your workspace at risk of unauthorised access, cross-user impersonation, data spoofing and more. Learn more about how to secure your Messenger on our help centre. This update replaces the previous Identity Verification (IdV) method with features designed to protect user data. If you’re using Identity Verification, migrate to JWTs to benefit from these improvements. Identity Verification will continue to work, but is considered deprecated and will not receive future updates. You’ll find the new JWT configuration in the Security tab within your Messenger settings.