Welcome to Hootsuite's Trust Center. Our commitment to data privacy and security is embedded in every part of our business.
Our Information Security Management System and program is aligned with the NIST Cybersecurity Framework (CSF), and Hootsuite has a comprehensive suite of security policies based on NIST CSF, NIST 800-53, ISO 27001, SOC 2 Trust Services Criteria, FedRAMP, and GDPR. The security policies are grounded in the key principles of least privilege, need-to-know, and segregation of duties, and govern access to facilities, systems, and data. The policies are refreshed annually, approved by senior management, and reviewed by our external auditors. Our independent annual SOC 2 audit report, ISO 27001 certification, and FedRAMP certification provide details on our ISMS and its relationship with the various standards.
Use this portal to learn about our security and privacy posture and request access to our security documentation.
Hootsuite is excited to share that we have successfully completed our ISO 27017 certification. Please check out the Documents section of the Trust Center to review and download as needed for your records.
Hootsuite is excited to share that we have successfully completed our ISO 27018 certification. Please check out the Documents section of the Trust Center to review and download as needed for your records.
Hootsuite is excited to share that we have successfully completed our ISO 27701 certification. Please check out the Documents section of the Trust Center to review and download as needed for your records.
Hootsuite is excited to share that we have successfully completed our ISO 27001 certification. Please check out the Documents section of the Trust Center to review and download as needed for your records.
Hootsuite's third party led SOC 2 Type II audit reports are now available for your review. Please check out the Documents section of the Trust Center to review and download as needed for your records.
If you think you may have discovered a vulnerability, please send us a note.