Highspot: security & AI-training scorecard
highspot.com ↗ · Sales enablement · Last checked Oct 17, 2026
Does Highspot train AI on customer data?
Unclear“Customer data is never stored, never shared, and never used to train third-party models.”
Note: Covers third-party models; no statement found on Highspot's own models.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Highspot is certified to meet global standards including SOC 2 Type II, ISO 27001, ISO 27701, GDPR, and the EU AI Act.”
ISO/IEC 27001
Certified information security management system.
Yes
“Highspot’s Information Security Management System is certified under the ISO 27001:2022 standard.”
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA listed in Seismic trust center
“LEGAL Data Processing Agreement”
Note: Listed in the trust center of parent Seismic.
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Unclear
“Customer data is never stored, never shared, and never used to train third-party models.”
Note: Covers third-party models; no statement found on Highspot's own models.
Data retention
What the vendor publishes about how long customer data is kept.
Not verified from vendor-owned sources
Note: Not located in fetched sources.
No vendor source found as of check date.
Subprocessor list
Where the vendor lists third parties that process customer data.
Note: Subprocessors listed in Seismic trust center.
Trust center
The vendor's security/trust portal.
Other notes
Additional context from vendor sources.
Highspot site footer reads 'Highspot by Seismic' and links to the Seismic trust center.
“About Highspot by Seismic”
All sources checked (3)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Highspot's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.