Close Trust Center

generated: '2026-08-13'
method: searched
probe: true
source: https://close.com/security
url: https://trust.close.com/
description: >-
  Close publishes a security and privacy page at close.com/security naming its
  compliance posture, plus a hosted Trust Center at trust.close.com. The Trust
  Center is a client-rendered single-page app — its HTML shell carries only the
  title "Close Trust Center" and no readable certification text, so every
  certification below is sourced from close.com/security, which states it in
  plain HTML.
trust_center:
  url: https://trust.close.com/
  http_status: 200
  probed: '2026-08-13'
  machine_readable: false
  note: >-
    JS-rendered; no server-side text. A non-browser agent evaluating Close's
    compliance posture gets nothing from this URL.
certifications:
  - name: SOC 2 Type 2
    status: certified
    source: https://close.com/security
    detail: >-
      Close states it is a "SOC 2 Type 2 certified SaaS provider" and describes
      how it meets each of the five trust service principles (security,
      availability, processing integrity, confidentiality, privacy).
  - name: GDPR
    status: compliant
    source: https://close.com/gdpr
    detail: >-
      Close states it meets both Data Controller and Data Processor obligations
      under the EU GDPR and publishes a full GDPR compliance statement.
  - name: CCPA
    status: published
    source: https://close.com/ccpa
    detail: Linked from the site footer alongside Terms, Privacy and GDPR.
not_claimed:
  - ISO 27001
  - PCI DSS
  - HIPAA
  - FedRAMP
  - CSA STAR
not_claimed_note: >-
  No claim for any of these was found on close.com/security, the footer legal
  pages, or the Trust Center shell. Recorded as an absence, not a failure.
data_handling_claims:
  - Data is visible only to members of the customer's organization plus a small number of Close support/training staff.
  - No sharing with third parties without consent.
  - Encryption in transit and at rest; access to confidential data regularly reviewed.
  - Incident response and notification procedures.
legal:
  terms: https://close.com/terms
  privacy: https://close.com/privacy
  gdpr: https://close.com/gdpr
  ccpa: https://close.com/ccpa
  security: https://close.com/security
evidence:
  - source: https://close.com/security
    http_status: 200
    fetched: '2026-08-13'
    keywords: [soc 2 type 2, gdpr, encryption, incident response]
  - source: https://trust.close.com/
    http_status: 200
    fetched: '2026-08-13'
    keywords: [trust center]
    note: SPA shell only