Apollo.io: security & AI-training scorecard
apollo.io ↗ · Data enrichment · Last checked Oct 16, 2026
Does Apollo.io train AI on customer data?
Yes“We may use information collected through the Services, including Contributor Database records and Usage Data, to train internal models. We also rely on commercial AI providers, including providers of large language models (“LLMs”), to deliver certain Services. We prohibit third-parties from using any of your information for training, and require deletion of inputs and outputs after a defined retention period.”
Note: Internal-model training disclosed; third-party AI training prohibited.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“SOC 2 Type 2 Report (Security, Availability, Confidentiality)”
ISO/IEC 27001
Certified information security management system.
Yes
“ISO 27001 Recertification”
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA referenced
“Customers and Users should refer to our Data Processing Addendum”
Note: GDPR listed under Compliance in trust center.
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Yes
“We may use information collected through the Services, including Contributor Database records and Usage Data, to train internal models. We also rely on commercial AI providers, including providers of large language models (“LLMs”), to deliver certain Services. We prohibit third-parties from using any of your information for training, and require deletion of inputs and outputs after a defined retention period.”
Note: Internal-model training disclosed; third-party AI training prohibited.
Data retention
What the vendor publishes about how long customer data is kept.
Purpose-based; no fixed period published
“Apollo retains personal information for a period consistent with the purposes for which it was collected and processed, unless you submit a request to delete your information.”
Subprocessor list
Where the vendor lists third parties that process customer data.
Note: Listed under Legal > Subprocessors in trust center.
All sources checked (2)
Fetched on Oct 16, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Apollo.io's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.