Exclaimer Trust Center

generated: '2026-08-13'
method: searched
probe: true
source: https://exclaimer.com/product/security/
url: https://trust.exclaimer.com/
compliance_page: https://exclaimer.com/product/security/
trust_center_platform: Conveyor
trust_center_note: >-
  trust.exclaimer.com returns HTTP 200 but is a client-side rendered Conveyor
  trust-portal shell; no certification text is present in the served HTML. The
  certification list below is therefore taken from Exclaimer's own security page
  at https://exclaimer.com/product/security/, which states each claim in prose.
certifications:
- name: SOC 2 Type II
  claim: certified
  detail: SOC 2 Type II certified by the AICPA for security, availability, and confidentiality.
- name: ISO/IEC 27001
  claim: certified
  detail: Certified ISMS covering management of sensitive data.
- name: ISO/IEC 27018
  claim: certified
  detail: Certified for protection of personally identifiable information (PII) in the cloud.
- name: PCI DSS
  claim: self-certified
  detail: >-
    Self-certified against PCI DSS via an annually reviewed self-assessment
    questionnaire; card payments are handled by a PCI DSS-certified third-party
    provider so cardholder data is not processed by Exclaimer directly.
- name: CSA (Cloud Security Alliance)
  claim: certified
  detail: Certified by the Cloud Security Alliance following an independent assessment of cloud service security controls.
- name: Cyber Essentials
  claim: certified
  detail: Certified under the UK government-backed Cyber Essentials scheme managed by the NCSC.
- name: HIPAA
  claim: compliant
  detail: States HIPAA compliance for handling protected health information (PHI).
- name: GDPR
  claim: compliant
  detail: States full compliance with the EU General Data Protection Regulation.
- name: CCPA
  claim: compliant
  detail: States adherence to the California Consumer Privacy Act of 2018 and other U.S. privacy laws.
not_claimed:
- name: FedRAMP
  note: >-
    An automated keyword probe of trust.exclaimer.com matched "FedRAMP" inside the
    Conveyor platform's own boilerplate/JS payload, not in any Exclaimer claim.
    Exclaimer's security page does not mention FedRAMP. Recorded here so a later
    re-run does not re-introduce it as a certification.
evidence:
- source: https://exclaimer.com/product/security/
  http_status: 200
  kind: provider security/compliance page (server-rendered prose)
  keywords:
  - soc 2 type ii
  - iso/iec 27001 & 27018
  - pci dss
  - csa
  - cyber essentials
  - hipaa
  - gdpr
  - ccpa
- source: https://trust.exclaimer.com/
  http_status: 200
  kind: trust center portal (Conveyor; JS-rendered, no certification text in HTML)