11x: security & AI-training scorecard
11x.ai ↗ · AI SDR · Last checked Oct 17, 2026
Does 11x train AI on customer data?
No“Notwithstanding anything to the contrary in this Agreement, 11x shall not use any Customer Data to train any artificial intelligence or machine learning models.”
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Our SOC2 Type II certification validates our adherence to critical criteria including System Security, Availability, Processing Integrity, Confidentiality, and Privacy.”
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: Not listed on security page or trust center (trust center lists SOC 2 Type 2 and CASA Tier 3).
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA for EU customers
“we maintain data processing agreements (DPA) for all EU-based customers”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“Notwithstanding anything to the contrary in this Agreement, 11x shall not use any Customer Data to train any artificial intelligence or machine learning models.”
Data retention
What the vendor publishes about how long customer data is kept.
Not verified from vendor-owned sources
Note: Trust center lists a gated 'Data Retention Policy'; no period published.
No vendor source found as of check date.
Subprocessor list
Where the vendor lists third parties that process customer data.
Not verified from vendor-owned sources
Note: Security page mentions subprocessors but no list was found.
No vendor source found as of check date.
Trust center
The vendor's security/trust portal.
Note: SafeBase portal; read via WebFetch because the site blocks automated browsers.
All sources checked (4)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect 11x's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.