GTM Trust Index

Origami Agents: security & AI-training scorecard

origami.chat ↗ · AI SDR · Last checked Oct 17, 2026

Does Origami Agents train AI on customer data?

No
“Origami shall not use, or authorize a Sub-processor to use, Customer Personal Data, including prompts and outputs, to train, fine-tune, or improve a general-purpose or shared AI model.”

Note: Customer-specific training requires a separate written instruction (DPA).

SOC 2

Independent audit of security controls. Type II covers operating effectiveness over a period.

Unknown

Not verified from vendor-owned sources

Note: No SOC 2 statement in privacy policy, terms or DPA; trust.origamiagents.com returned 429/404.

No vendor source found as of check date.

ISO/IEC 27001

Certified information security management system.

Unknown

Not verified from vendor-owned sources

Note: No statement found in fetched sources.

No vendor source found as of check date.

HIPAA / BAA

Whether the vendor will sign a Business Associate Agreement for PHI.

Unknown

Not verified from vendor-owned sources

Note: No HIPAA/BAA statement found in fetched sources.

No vendor source found as of check date.

GDPR DPA

Data Processing Agreement/Addendum for personal data.

Confirmed

DPA published (incorporated into terms)

“The DPA takes effect when you accept these Terms”

Trains AI on customer data

Whether the vendor says it uses customer data to train AI models.

No

No

“Origami shall not use, or authorize a Sub-processor to use, Customer Personal Data, including prompts and outputs, to train, fine-tune, or improve a general-purpose or shared AI model.”

Note: Customer-specific training requires a separate written instruction (DPA).

Data retention

What the vendor publishes about how long customer data is kept.

Published

As long as needed to provide the Service

“We retain personal data for as long as needed to provide the Service and for legitimate business and legal purposes.”

Subprocessor list

Where the vendor lists third parties that process customer data.

Unknown

Not verified from vendor-owned sources

Note: Model providers listed in DPA Annex 3; standalone list not located.

No vendor source found as of check date.

Trust center

The vendor's security/trust portal.

Unknown

Not verified from vendor-owned sources

Note: trust.origamiagents.com returned errors (429/404); not verified.

No vendor source found as of check date.

Other notes

Additional context from vendor sources.

Published

origamiagents.com redirects to origami.chat; legal entity is Airsplash Inc., doing business as Origami.

“Airsplash Inc., doing business as Origami”

All sources checked (3)

Fetched on Oct 17, 2026. Vendor pages can change after this date.

Is this wrong? / Claim this listing

Vendors and readers can send evidence links. Nothing is published without a source.

Send a correction

Informational only, not legal advice or an audit. Summaries reflect Origami Agents's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.