Woodpecker: security & AI-training scorecard
woodpecker.co ↗ · Outbound email · Last checked Oct 17, 2026
Does Woodpecker train AI on customer data?
No“Personal Data of Prospects that Woodpecker processes as a processor is not used to train or improve AI models, except in anonymized or aggregated form that does not permit the identification of any individual.”
Note: Carve-out for anonymized/aggregated data.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Not verified from vendor-owned sources
Note: No statement found in fetched sources.
No vendor source found as of check date.
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: ISO 27001 cited only for hosting provider OVH.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA published (with SCCs)
“Data Processing Addendum (With SCC)”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“Personal Data of Prospects that Woodpecker processes as a processor is not used to train or improve AI models, except in anonymized or aggregated form that does not permit the identification of any individual.”
Note: Carve-out for anonymized/aggregated data.
Data retention
What the vendor publishes about how long customer data is kept.
Not verified from vendor-owned sources
Note: Not located in fetched sources.
No vendor source found as of check date.
Subprocessor list
Where the vendor lists third parties that process customer data.
Trust center
The vendor's security/trust portal.
woodpecker.co/safety-security ↗
Note: Security page; no separate trust portal.
All sources checked (6)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Woodpecker's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.