generated: '2026-08-29'
method: searched
source: https://www.zyte.com/trust-center/
provider: Zyte
providerId: zyte
trust_center:
  name: Zyte Security Trust Center
  url: https://www.zyte.com/trust-center/
  http_status: 200
  platform: self-hosted
  note: >-
    A page on the marketing site, not a Vanta/Drata/SafeBase hosted trust
    portal. There is no machine-readable feed and no document-request workflow
    beyond email/sales contact.
certifications:
  - name: ISO 27001
    status: certified
    scope: Zyte itself, and Zyte states all of its hosting providers are also ISO 27001 certified.
    certifier_reference: https://isoqar.com/iso-standards/iso-27001/
    evidence: >-
      "Zyte is ISO 27001 certified and all of its hosting providers have
      achieved ISO 27001 certification."
compliance:
  - name: GDPR
    status: claimed
    evidence: >-
      "Zyte is committed to GDPR compliance. We have implemented robust data
      protection..."
  - name: CCPA
    status: claimed
  - name: FISD Alternative Data Standards
    status: co-author
    note: >-
      Zyte states it co-authored the FISD Alternative Data Standards — a
      domain-relevant standard for the alternative-data market Zyte sells into.
      Recorded also in conformance/zyte-conformance.yml.
absent:
  - name: SOC 2
    note: >-
      Not claimed on the trust center. NOTE: https://www.zyte.com/security-and-compliance/
      returns HTTP 200 but is a soft-404 shell byte-identical to a nonsense slug —
      the compliance content lives only at /trust-center/.
  - name: PCI DSS
    note: Not claimed; Zyte does not handle cardholder data on behalf of customers.
  - name: HIPAA
    note: Not claimed.
  - name: FedRAMP
    note: Not claimed.
penetration_testing:
  performed: true
  report_availability: on request
  evidence: >-
    "Zyte can provide penetration test reports to clients upon request. To
    ensure the confidentiality and security of sensitive information, access to
    these reports [is restricted]."
data_processing:
  dpa: https://www.zyte.com/terms-policies/dpa/
  subprocessors: https://www.zyte.com/terms-policies/subprocessor/
  subprocessor_list_location: Annex III of the Data Processing Agreement
  privacy_policy: https://www.zyte.com/terms-policies/privacy-policy/
  do_not_sell: https://www.zyte.com/terms-policies/do-not-sell/
  acceptable_use: https://www.zyte.com/terms-policies/acceptable-use-policy/
related:
  - security/zyte-vulnerability-disclosure.yml
  - security/zyte-domain-security.yml
  - conformance/zyte-conformance.yml