Reply.io: security & AI-training scorecard
reply.io ↗ · Sales engagement · Last checked Oct 17, 2026
Does Reply.io train AI on customer data?
No“Except as expressly agreed in writing, Reply does not use Your Data to train generalized artificial intelligence or machine learning models for the benefit of other customers.”
Note: Scoped to 'generalized' models for other customers.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“SOC 2 Type II Report”
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: Not listed in trust center.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA referenced
“our processing is governed by our agreements with the customer, including any applicable Data Processing Agreement (“DPA”)”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“Except as expressly agreed in writing, Reply does not use Your Data to train generalized artificial intelligence or machine learning models for the benefit of other customers.”
Note: Scoped to 'generalized' models for other customers.
Data retention
What the vendor publishes about how long customer data is kept.
As long as reasonably necessary; deleted after cancellation within a commercially reasonable time
“Reply retains personal information for as long as reasonably necessary to provide the Services”
Subprocessor list
Where the vendor lists third parties that process customer data.
Not verified from vendor-owned sources
Note: Not located in fetched sources.
No vendor source found as of check date.
All sources checked (3)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Reply.io's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.