Reachdesk · Trust Center

Reachdesk Trust Center

Trust center

Reachdesk operates a public trust center on its own subdomain, hosted by Vanta. The page exists and returns HTTP 200 with real Reachdesk-specific metadata, but its contents — the certification list, the sub-processor list and any downloadable reports — render client-side and the underlying Vanta API rejects unsigned requests. No certification is claimed in this file because none could be verified anonymously.

Reachdesk maintains a public trust center documenting verified, claimed, and note compliance.

Corporate GiftingDirect MailSwagB2BSales EnablementCustomer SuccessMarketing AutomationGifting PlatformRewardsMCPAI AgentsOpenAPI
Trust center:

Certifications & Compliance

verifiedclaimednote

Source

Trust Center

Raw ↑
generated: '2026-08-13'
method: probed
source: https://trust.reachdesk.com/
description: >-
  Reachdesk operates a public trust center on its own subdomain, hosted by Vanta.
  The page exists and returns HTTP 200 with real Reachdesk-specific metadata, but
  its contents — the certification list, the sub-processor list and any downloadable
  reports — render client-side and the underlying Vanta API rejects unsigned
  requests. No certification is claimed in this file because none could be verified
  anonymously.
trust_center:
  present: true
  url: https://trust.reachdesk.com/
  http_status: 200
  platform: Vanta
  canonical: https://trust.reachdesk.com
  title: Reachdesk Trust Center
  vanta_slug_id: xoem6skatmbuels6wgi3l
  checked: '2026-08-13'
certifications:
  verified: []
  claimed: []
  note: >-
    NOT verified, not "none". The trust center is a Vite/React single-page app whose
    only server-rendered content is <head> metadata. Vanta's data endpoints answer
    401 Unauthorized (api.vanta.com) or require a `signature`/`signedAt` pair
    (app.vanta.com/graphql), and the legacy GraphQL API is retired (HTTP 410). A
    human with a browser can read the certification list; an anonymous machine
    cannot. No Compliance pointer is emitted for this provider on the strength of a
    page whose contents were unreadable.
probes:
  - url: https://trust.reachdesk.com/
    status: 200
    content_type: text/html
    result: SPA shell only — no certification names present in the served HTML
  - url: https://api.vanta.com/v1/trust-report/xoem6skatmbuels6wgi3l
    status: 401
    result: Unauthorized
  - url: https://app.vanta.com/graphql
    status: 400
    result: 'Missing `signature` or `signedAt`'
  - url: https://api.vanta.com/graphql
    status: 410
    result: GraphQL API retired in favour of the Vanta REST API
related_evidence:
  gdpr_api: >-
    Reachdesk exposes first-class GDPR data-subject endpoints (POST /gdpr/requests
    for erase_subject and export_subject). That is a concrete, machine-verifiable
    privacy capability, and it is stronger evidence than an unreadable badge wall.
  privacy_policy: https://www.reachdesk.com/privacy-policy
  terms: https://www.reachdesk.com/terms-and-conditions
  cookie_policy: https://www.reachdesk.com/cookie-policy
  scim_saml: >-
    SCIM 2.0 provisioning and SAML SSO with Okta, Microsoft Entra ID and OneLogin
    are documented in the knowledge base.
vulnerability_disclosure:
  present: false
  note: >-
    No security.txt on any Reachdesk host, no /security or /vulnerability-disclosure
    page on www.reachdesk.com (both 404), and no HackerOne, Bugcrowd or Intigriti
    program found. No Security pointer is emitted.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/reachdesk-trust-center"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.