Data last updated Oct 17, 2026
Will this AI sales tool pass security review?
Sourced scorecards for 59 GTM tools. SOC 2, ISO 27001, HIPAA/BAA, DPA, and whether they train AI on your data. Every claim links to the vendor's own page.
- 59
- tools tracked
- 59
- fully reviewed
- 200
- vendor sources cited
The index
Unknown = not verified from vendor-owned sources. How we score
| Tool | Category | SOC 2 | ISO 27001 | HIPAA BAA | DPA | Trains on data | Checked |
|---|---|---|---|---|---|---|---|
| 11x | AI SDR | Type II | Unknown | Unknown | DPA available | No | 2026-10-17 |
| 6sense | Signals / intent | Type II | Yes | Unknown | DPA available | Unknown | 2026-10-17 |
| AiSDR | AI SDR | Type II | Unknown | Not supported (per terms) | DPA available | Opt-out | 2026-10-17 |
| Amplemarket | Sales engagement | Type II | Unknown | Unknown | Unknown | Unknown | 2026-10-17 |
| Apollo.io | Data enrichment | Type II | Yes | Unknown | DPA available | Yes | 2026-10-16 |
| Artisan | AI SDR | Type II | Unknown | Not supported (per terms) | DPA available | No | 2026-10-17 |
| Attio | CRM AI | Unknown | Yes | Unknown | DPA available | Unknown | 2026-10-17 |
| Avoma | Conversation intelligence | Type II | Unknown | BAA not confirmed | DPA available | No | 2026-10-16 |
| Backstory (formerly People.ai) | Revenue intelligence | Type II | Unknown | Unknown | DPA available | No | 2026-10-17 |
| Bombora | Signals / intent | Unknown | Unknown | Unknown | Unknown | Unclear | 2026-10-17 |
| Clay | Data enrichment | Type II | Yes | Unknown | DPA available | No | 2026-10-16 |
| Close | CRM AI | Type II | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Cognism | Data enrichment | Type II | Yes | Unknown | DPA available | Unclear | 2026-10-16 |
| Common Room | Signals / intent | Type I | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Copy.ai | AI SDR | SOC 2 (type not stated) | Unknown | Unknown | Unknown | No | 2026-10-17 |
| Demandbase | Signals / intent | Type II | Yes | Unknown | Unknown | No | 2026-10-17 |
| Dialpad | Conversation intelligence | Type II | Yes | BAA available | DPA available | Unclear | 2026-10-17 |
| Fathom | AI notetaker | Type II | No | BAA not confirmed | DPA available | Opt-out | 2026-10-16 |
| Fireflies.ai | AI notetaker | Type II | Unknown | BAA not confirmed | DPA available | No | 2026-10-16 |
| FullEnrich | Data enrichment | Type II | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Gojiberry | AI SDR | Unknown | Unknown | Unknown | Unknown | Unknown | 2026-10-17 |
| Gong | Conversation intelligence | Type II | Yes | BAA not confirmed | DPA available | No | 2026-10-16 |
| Grain | AI notetaker | Type II | Unknown | Unknown | DPA not confirmed | No | 2026-10-16 |
| Granola | AI notetaker | Type II | Unknown | BAA available | DPA available | Opt-out | 2026-10-16 |
| Highspot | Sales enablement | Type II | Yes | Unknown | DPA available | Unclear | 2026-10-17 |
| HubSpot Breeze (HubSpot AI) | CRM AI | Type II | Unknown | Unknown | DPA available | Opt-out | 2026-10-16 |
| Hunter | Data enrichment | Unknown | Unknown | Unknown | DPA available | Unclear | 2026-10-17 |
| Instantly | Outbound email | Type II | Unknown | Unknown | DPA available | Unclear | 2026-10-16 |
| Jiminny | Conversation intelligence | Type II | Unknown | BAA not confirmed | DPA available | Unclear | 2026-10-17 |
| Kaspr | Data enrichment | Unknown | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Lavender | AI email assistant | Type II | Unknown | Not supported (per terms) | DPA not confirmed | Unknown | 2026-10-17 |
| lemlist | Outbound email | Type II | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Lusha | Data enrichment | Type II | Yes | Unknown | DPA available | No | 2026-10-16 |
| Mailshake | Outbound email | Unknown | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Momentum | Conversation intelligence | Type II | Unknown | BAA not confirmed | DPA available | Unclear | 2026-10-17 |
| Nooks | AI dialer | Type II | Yes | Unknown | DPA available | Opt-out | 2026-10-17 |
| Origami Agents | AI SDR | Unknown | Unknown | Unknown | DPA available | No | 2026-10-17 |
| Orum | AI dialer | Type II | Yes | Unknown | DPA available | Unknown | 2026-10-17 |
| Otter.ai | AI notetaker | SOC 2 (type not stated) | Unknown | BAA not confirmed | DPA not confirmed | Yes | 2026-10-16 |
| Outreach | Sales engagement | Type II | Yes | BAA not confirmed | DPA available | Unclear | 2026-10-16 |
| Persana AI | AI SDR | Unknown | Unknown | Unknown | Unknown | Unknown | 2026-10-17 |
| Pipedrive | CRM AI | Type II | Yes | Not supported (per terms) | DPA available | Unclear | 2026-10-17 |
| Qualified | AI SDR | Type II | Unknown | Unknown | DPA available | Unclear | 2026-10-17 |
| Read AI | AI notetaker | Type II | Unknown | BAA available | DPA available | Unclear | 2026-10-17 |
| Regie.ai | AI SDR | Unknown | Unknown | Not supported (per terms) | Unknown | Unclear | 2026-10-17 |
| Reply.io | Sales engagement | Type II | Unknown | Unknown | DPA available | No | 2026-10-17 |
| RocketReach | Data enrichment | Type II | Yes | Unknown | DPA available | Unknown | 2026-10-17 |
| Salesforce Agentforce | CRM AI | SOC 2 (type not stated) | Yes | Unknown | DPA available | Unclear | 2026-10-17 |
| Salesloft | Sales engagement | Type II | Yes | Unknown | DPA available | Unclear | 2026-10-16 |
| Seamless.AI | Data enrichment | Type II | Yes | Unknown | DPA not confirmed | Unknown | 2026-10-17 |
| Smartlead | Outbound email | Unknown | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Surfe | Data enrichment | Unknown | Yes | Unknown | DPA available | Unknown | 2026-10-17 |
| Sybill | AI notetaker | Type II | Yes | BAA not confirmed | DPA available | Unknown | 2026-10-17 |
| tl;dv | AI notetaker | Type II | Unknown | Unknown | DPA available | No | 2026-10-17 |
| Unify | Signals / intent | Type II | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| UserGems | Signals / intent | Type II | Unknown | Unknown | DPA available | Unknown | 2026-10-17 |
| Warmly | Signals / intent | SOC 2 (type not stated) | Unknown | Unknown | Unknown | Unknown | 2026-10-17 |
| Woodpecker | Outbound email | Unknown | Unknown | Unknown | DPA available | No | 2026-10-17 |
| ZoomInfo | Data enrichment | Type II | Yes | Unknown | DPA available | Unclear | 2026-10-17 |
Browse by category
- AI dialer (2)
- AI email assistant (1)
- AI notetaker (8)
- AI SDR (9)
- Conversation intelligence (5)
- CRM AI (5)
- Data enrichment (11)
- Outbound email (5)
- Revenue intelligence (1)
- Sales enablement (1)
- Sales engagement (4)
- Signals / intent (7)
Weekly “what changed” email
Policy changes, new certifications and new listings, with sources. Signup opens soon.
Not live yet. Nothing is collected.