Demandbase: security & AI-training scorecard
demandbase.com ↗ · Signals / intent · Last checked Oct 17, 2026
Does Demandbase train AI on customer data?
No“Demandbase does not use customer data to train LLMs or generative AI.”
Note: Same page says company data (e.g. CRM data) is used to train and fine-tune ML models 'for the provision of services to your specific account'.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Demandbase is happy to provide a copy of our current Type II SOC 2 Security TSC report under NDA”
ISO/IEC 27001
Certified information security management system.
Yes
“ISO/IEC 27001”
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
Not verified from vendor-owned sources
Note: No customer DPA located in fetched sources.
No vendor source found as of check date.
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“Demandbase does not use customer data to train LLMs or generative AI.”
Note: Same page says company data (e.g. CRM data) is used to train and fine-tune ML models 'for the provision of services to your specific account'.
Data retention
What the vendor publishes about how long customer data is kept.
Max 13 months after termination; deletion within 30 days on request
“Customer data is retained for a maximum of 13 months following the termination of your relationship with Demandbase, and will be deleted within 30 days upon written request.”
Subprocessor list
Where the vendor lists third parties that process customer data.
Not verified from vendor-owned sources
Note: Not located in fetched sources.
No vendor source found as of check date.
Trust center
The vendor's security/trust portal.
Note: SafeBase portal; read via WebFetch.
All sources checked (3)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Demandbase's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.