Attio: security & AI-training scorecard
attio.com ↗ · CRM AI · Last checked Oct 17, 2026
Does Attio train AI on customer data?
UnknownNo vendor statement found as of the check date.
Note: Services Agreement bars customers from using enrichment data to train models; no statement found on Attio's own use of customer data for training.
No vendor source found as of check date.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Not verified from vendor-owned sources
Note: Trust center compliance section lists ISO 27001:2022, GDPR and CCPA; no SOC 2 listed.
No vendor source found as of check date.
ISO/IEC 27001
Certified information security management system.
Yes
“Attio - ISO 27001 Certificate”
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA published
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Not verified from vendor-owned sources
Note: Services Agreement bars customers from using enrichment data to train models; no statement found on Attio's own use of customer data for training.
No vendor source found as of check date.
Data retention
What the vendor publishes about how long customer data is kept.
Not verified from vendor-owned sources
Note: Privacy policy covers personal data generally; no customer-data retention period published.
No vendor source found as of check date.
Subprocessor list
Where the vendor lists third parties that process customer data.
Note: Subprocessors tab in trust center.
All sources checked (3)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Attio's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.