Trust Center
Welcome to the Pipedrive Trust Center. This is your central hub for detailed information and resources regarding how we protect your data, uphold your privacy, and maintain the security and reliability of our services.
In the digital world, trust is earned through transparency and action. We are committed to building and maintaining that trust by ensuring our security measures and privacy practices not only meet but exceed industry standards.
Please explore this site as information is being added and updated regularly. There is a free search option at the top of the page to quickly locate information that you're interested in.
- What are Pipedrive’s and the client's respective roles under the data protection legislation (like the GDPR)?
- Is Pipedrive GDPR compliant?
- Where can I find Pipedrive's Privacy Notice?
- How to contact Pipedrive’s Data Protection Officer?
- If my company's data is hosted in EU, will my data be stored and processed only within the EU?
Trust Center Updates
New / Updated Documents
2026 Penetration Testing Report is now available for download. Access to the request link is here: https://trustcenter.pipedrive.com/?itemUid=b143d369-02e5-440f-9c9b-71f4a4634c45&source=click
Legal
Updates to sub-processor list
On July 13, 2026 we made some updates to our sub-processor list.
What’s changing?
- We have added Zight, Inc. as a sub-processor: Zight is used to enable screenshot, screen recording, video, audio and attachment sharing in customer support communications for troubleshooting and support purposes.
You can view the updated sub-processors list here.
Updated Privacy Notice, Data Processing Addendum and Terms of Service
We've recently updated our Privacy Notice and Data Processing Addendum (DPA) to provide greater transparency and clarity regarding our data practices. We have also made minor updates to our Terms of Service to improve clarity and consistency. We encourage you to review the full documents, but here is a summary of the key changes:
Privacy Notice
The updated Privacy Notice is available here.
- Gmail Data Use: We added that Gmail data accessed through email sync may also be used to enhance the email experience for productivity purposes, including AI-powered features such as email summaries, meeting preparation, and contextual recommendations, when you choose to enable or interact with those features within the Pipedrive Services.
- Clarified Data Processing: We clarified the circumstances under which we may access Client Data in connection with providing and maintaining our Services.
Data Processing Addendum
The updated DPA is available here
- Expanded Legal Coverage: We broadened the data protection laws and international transfer safeguards referenced in the DPA to reflect additional jurisdictions.
- Clearer Processing Purpose: We provided more detail on the purposes for which Personal Data is processed and the activities this covers.
- Clearer Consent Expectations: We clarified that Client's responsibility for obtaining necessary consents and authorizations specifically extends to meeting recordings and AI-powered features, in addition to marketing purposes.
- Defined Terms Refined: We refined certain defined terms for improved clarity and consistency.
Terms of Service
The updated Terms of Service are available here.
- Clarifications for Readability: We made minor wording updates throughout the Terms of Service to improve clarity and consistency. These changes do not alter your rights or obligations under the Terms.
Your continued use of the Pipedrive Services after the updated Privacy Notice, DPA, and Terms of Service take effect means you have read, understood and agreed to the current versions. Questions? Contact our Privacy team at privacy@pipedrive.com.
Updates to sub-processor list
On June 25, 2026 we made some updates to our sub-processor list.
What’s changing?
- The sub-processor list has been reorganized into clearer categories: Hosting and Infrastructure, Feature-specific, AI, and Customer Support.
- Formatting and clarification updates to improve readability.
- Addition of new sub-processors:
- Amazon Web Services, Inc.: artificial intelligence features and functionality.
- Anthropic, PBC: artificial intelligence features and functionality.
- Hyperdoc Inc. (d/b/a Recall.ai): AI meeting intelligence features and functionality.
You can view the updated list of sub-processors here.
Updates to sub-processor list
We have made updates to our sub-processor list.
What’s changing?
- Growster SAS (Surfe): Surfe is a new service provider for our data enrichment feature and will replace Rightbound Inc. as of March 9. The data enriched by Rightbound via the data enrichment feature will stay on your account.
You can view the updated list of sub-processors here.
Updated Privacy Notice
January 5, 2026
We've updated our Privacy Notice to provide greater transparency and clarity. The updated Privacy Notice is available here. We encourage you to review the full Privacy Notice, but here is a summary of the key changes:
- AI Transparency: We added a new section explaining how Pipedrive uses artificial intelligence and machine learning.
- Expanded Rights Information: We've provided clearer guidance on your privacy rights, including more detailed information about opting out.
- Additional Data Sources: We now more clearly describe information we may receive from other sources, including commercial data enrichment services.
- Language Alignment: We've updated terminology throughout the Privacy Notice to align with our Terms of Service and for improved clarity.
Your continued use of the Pipedrive Services after the updated Privacy Notice takes effect means you have read, understood and agreed to the current version.
Questions? Contact our Privacy team at privacy@pipedrive.com.
Updates to sub-processor list
We have made updates to our sub-processor list:
Pipedrive will add Atlassian PTY Ltd. (LOOM) as a new sub-processor.
- Atlassian PTY Ltd. (LOOM): Loom is used to enable image, video or attachment sharing in customer support communications, and will be processing images and videos submitted by Clients for troubleshooting and support purposes.
You can view the updated list of sub-processors here.
Updates to sub-processor list
We’ve made updates to our sub-processor list.
What’s changing?
- Tet SIA. Tet SIA is supporting hosting services for the Campaigns Feature and is added to the list.
- APIHub, Inc. (Clearbit). APIHub, Inc has been removed because it was the third-party service provider for the Smart Contact Data feature, which has now been sunset. It has been replaced with Rightbound, a service provider for the Data Enrichment feature.
- Bird (previously MessageBird). The company has changed their trading name, although the name of the legal entity has remained the same. The company’s new name has been reflected in our records.
You can view the updated list of sub-processors here.
Updated Data Processing Addendum
We’ve updated our Data Processing Addendum (DPA). The key changes include:
- The DPA is now incorporated directly into our Terms of Service, eliminating the need for separate signatures
- We’ve added references to Brazilian Standard Contractual Clauses (SCCs) for enhanced compliance
- We’ve unified terminology throughout the document to align with our Terms of Service
- We’ve conducted a general review and update of the document for clarity and accuracy
You can find the latest version of our DPA at Pipedrive Data Processing Addendum.