Sprout Social

Sprout Social

Search the Trust Center...
Ctrl +K

Sprout Social | Customer Trust Portal

Sprout Social is the AI-Powered Social Intelligence platform, turning the pulse of the market into smart decisions your entire business can act on.

Our Customer Trust Portal offers hundreds of FAQs on common security, privacy, and compliance topics, along with comprehensive audit reports, certifications, and security artifacts. You can also leverage the AI Agent button above to receive automated answers to your questions about Sprout Social's security posture.


Badges

ico-registered
ICO Registered
gdpr
GDPR
eu-us-data-privacy
EU-US DPF
uk-extension-to-eu-us-dpf
UK-US DPF
swiss-us-dpf
Swiss-US DPF
ccpa
CCPA
pipeda
PIPEDA

Quick Summary

One or more annual third-party audit(s)

Has a formal mobile device management (MDM) program

Annual third-party penetration testing

Deletes customer data on request

Uses a centralized IAM solution (SSO) to manage employee access

Has an AI policy


Trusted by

Kraft Heinz
Jollibee
Vodafone GmbH
Bosch
Wipro
DHL
Glassdoor
Uber
United Nations
Make-A-Wish
University of Oxford
Cornell University
Carhartt
Hertz

Featured Documents


Documents & Knowledge Base FAQs


Announcements

Klue Security Incident — June 2026

A recent security incident involving Klue, a third-party competitive intelligence platform integrated with our systems, allowed an unauthorized party to access data in Sprout Social's Salesforce CRM system. The incident originated with our vendor Klue, where a threat actor obtained credentials associated with Klue's integration and used them to access connected customer Salesforce environments — including Sprout's. Importantly, no Sprout Social product or platform data was affected. For more information, please visit https://support.sproutsocial.com/hc/en-us/articles/46754555170701-Klue-Security-Incident-June-2026


Updated SOC 2 Reports for Sprout Social Products

Sprout Social is pleased to announce that we have published updated SOC 2 Type 2 reports for all three of our products: Sprout Social, Employee Advocacy, and Tagger/Influencer Marketing! Each report covers the System and Organization Controls Relevant to Security over a period ending September 30, 2024. Please view our Customer Trust Portal at https://trust.sproutsocial.com for more information.


SOC 2 for Tagger by Sprout Social

Sprout Social has successfully completed its SOC 2 Type 1 audit with controls specific to Tagger by Sprout Social's influencer marketing platform. Tagger unlocks true value for customers by streamlining end-to-end influencer and social campaign management, empowering a deeper understanding and ability to measure the full ROI of their holistic social investments.


CVE-2024-1709 - ConnectWise ScreenConnect

Sprout Social is committed to providing a safe and secure environment for all of our customers and users. On February 21, 2024, we began investigating any potential impact from the recent ConnectWise ScreenConnect vulnerability, tracked as CVE-2024-1709.

After a thorough analysis of our application, repositories, third-party applications/tooling, and dependencies, we have determined that Sprout Social does not use any ConnectWise products and we were NOT impacted by CVE-2024-1709.


SOC 2 Type 1 Report for Employee Advocacy

Sprout Social is delighted to announce the initial release of our SOC 2 Type 1 audit report with controls specific to our Employee Advocacy by Sprout Social platform! Sprout’s Employee Advocacy platform gives customers one place to put all their shareable content so employees can quickly and easily post approved content to their social networks.


SOC 2 Type 2 Report for Sprout Social

We are pleased to announce the release of our updated SOC 2 Type 2 audit report. Covering the period from October 1, 2022 to September 30, 2023 and issued on October 31, 2023, Sprout Social’s examination showed effective security controls with no exceptions/deviations.


ISO 27001 and ISO 27701

Sprout Social is excited to announce that we have successfully completed certification of our Information Security Management System (security program) against the ISO 27001 standard, and our Privacy Information Management System (privacy program) against the ISO 27701 standard. The certifications cover all assets, technologies, and processes employed by Sprout Social globally for processing, management, and delivery of the Sprout Social application and services to our customers.



Subprocessors
19

Subprocessor
Location of Processing
Usage Details
AWS

AWS

United States
Hosting provider
ClickHouse

ClickHouse

United States
Database and analytics processing
Cloudflare

Cloudflare

United States
Cloud security services
Datadog

Datadog

United States
Application monitoring
dbt Labs

dbt Labs

United States
Data transformation and orchestration
Elastic

Elastic

United States
Security information and event management (SIEM)
Firebase

Firebase

United States
Mobile crash analytics
FullStory

FullStory

United States
Cloud-based metrics service
Google Cloud

Google Cloud

United States
Backup hosting provider & Bot detection (reCAPTCHA)
Intercom

Intercom

United States
Product marketing and metrics service
ipdata

ipdata

United States
Audit trail/log enrichment
LaunchDarkly

LaunchDarkly

United States
Feature management service
Mailchimp

Mailchimp

United States
Email campaigns
Mixpanel

Mixpanel

United States
Cloud-based metrics service
OpenAI

OpenAI

United States
Generative AI functionality - OpenAI is a subprocessor for OpenAI-powered AI features. For the Sprout Social application, these features can be disabled within the platform through your Settings.
Pendo

Pendo

United States
Product marketing and metrics service
Postmark

Postmark

United States
Inbound email API
Segment

Segment

United States
Product marketing and metrics service
Very Good Security

Very Good Security

United States
Data collection and tokenization - Very Good Security, Inc. is a subprocessor that powers the Secure Forms feature in the Sprout Social application. Use of this feature is optional.
Last updated . .
View as:
Powered by Conveyor, the first end-to-end customer trust platform.
Learn more