Company profile
Customer.io is strong for legal/privacy evidence despite lacking a standalone Trust Center. AI subprocessor opt-out is a high-value teardown angle.
Baseline
Observed evidence
AICPA SOC certified / SOC references; HIPAA compliant; GDPR compliant
DPA; subprocessor list; AI feature subprocessors; HIPAA/GDPR/SOC positioning; security monitoring/pentest
Evidence surfaces
Interpretation
No standalone Trust Center observed; certification report details not public in this pass
Customer.io is strong for legal/privacy evidence despite lacking a standalone Trust Center. AI subprocessor opt-out is a high-value teardown angle.
Caution
Do not treat lack of Trust Center as immaturity; legal/security docs are strong and may fit a different disclosure model.
Sources
