Outreach: security & AI-training scorecard
outreach.ai ↗ · Sales engagement · Last checked Oct 16, 2026
Does Outreach train AI on customer data?
Unclear“Outreach secures the rights and permissions for all the data it uses to train its models, and Outreach only uses customer data per customers’ contractual commitments.”
Note: Training use depends on contract terms; Outreach says an AI Data Use Whitepaper is available via account team (not public).
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“SOC 2 Type II”
ISO/IEC 27001
Certified information security management system.
Yes
“ISO 27001”
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
HIPAA listed; BAA not confirmed
“HIPAA”
Note: 'HIPAA' appears in the Compliance list on the trust page; no public BAA statement found.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA in customer agreements
“Many of these measures are detailed in the data processing terms and/or DPA of your agreement.”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Unclear
“Outreach secures the rights and permissions for all the data it uses to train its models, and Outreach only uses customer data per customers’ contractual commitments.”
Note: Training use depends on contract terms; Outreach says an AI Data Use Whitepaper is available via account team (not public).
Data retention
What the vendor publishes about how long customer data is kept.
For as long as needed to provide services, per customer agreements
“Outreach will retain Client Data that we process on behalf of our Clients for as long as needed to provide services to our Clients and in accordance with our agreements with our Clients.”
Subprocessor list
Where the vendor lists third parties that process customer data.
Trust center
The vendor's security/trust portal.
“For Trust Center Access, Please Contact Your Account Executive.”
Note: Full trust portal is gated.
All sources checked (6)
Fetched on Oct 16, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Outreach's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.