Appcues is built to meet the security and compliance standards required by growing and enterprise teams.
We maintain:
• SOC 2 Type II Report
• GDPR and CCPA compliance support
• A published Data Processing Addendum (DPA) and Privacy Policy
• A documented and transparent subprocessor list
• Regular third-party penetration testing
• Advanced security controls and SLAs on Enterprise plans
Additionally, for teams with EU data residency requirements, we offer a separate EU data hosting environment where customer data is stored on EU-based infrastructure. Appcues operates under a global support model, and any cross-border access is governed by GDPR-compliant transfer safeguards, including the Data Privacy Framework and applicable contractual protections.
For full documentation, security reports, and detailed compliance information, visit our Trust Center.
