Instantly: security & AI-training scorecard
instantly.ai ↗ · Outbound email · Last checked Oct 16, 2026
Does Instantly train AI on customer data?
Unclear“Instantly is not responsible for the Third-Party Services' handling of your Inputs or Outputs, including for use in their model training.”
Note: No first-party statement found on whether Instantly trains its own models on customer data.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“SOC 2 Type I SOC 2 Type II”
Note: Trust center lists both SOC 2 Type I and Type II.
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: Not listed in trust center compliance section.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA published (with EU SCCs)
“DATA PROCESSING ADDENDUM”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Unclear
“Instantly is not responsible for the Third-Party Services' handling of your Inputs or Outputs, including for use in their model training.”
Note: No first-party statement found on whether Instantly trains its own models on customer data.
Data retention
What the vendor publishes about how long customer data is kept.
Return/delete or anonymize within 30 days after termination
“Within 30 days after the expiration or earlier termination of the Agreement, Service Provider shall, to the fullest extent technically possible in the circumstances, either (i) return and/or delete all Subscriber Personal Data”
Subprocessor list
Where the vendor lists third parties that process customer data.
All sources checked (3)
Fetched on Oct 16, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Instantly's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.