Trust Center
This Trust Center documents the security, privacy and compliance controls that protect customer data across the Freshworks platform. Use the product selector above to scope the content to the product you are evaluating; cards marked 'Applies across Freshworks' describe controls that operate at the platform or corporate level rather than per product.
Available immediately, with no request: our ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certificates, our SOC 3 report, our sub-processor list, our Data Processing Agreement and technical and organisational measures, and our security and privacy whitepaper.
Available on request, usually within [1] business day(s): our SOC 1 and SOC 2 Type 2 reports and bridge letters, penetration testing attestations, network architecture and data flow documentation, our business continuity plan and disaster recovery test summary, and our completed SIG and VSA questionnaires. You do not need an existing relationship with Freshworks to request access.
Where to start. If you are a CISO, begin with Compliance and Documents. If you are a security architect, begin with Data Security and Infrastructure. If you are a privacy officer, begin with Legal and Data Privacy. If you are assessing AI, begin with Legal → Subprocessors, which names our AI model providers. If you are in procurement, begin with Self-Assessments and Documents.
This content is reviewed quarterly. Each card shows the date it was last reviewed. Questions we have not answered here can go to security@freshworks.com
Trust Center Updates
Freshworks update on node.js vulnerabilty
Freshworks is aware of recently reported vulnerabilities affecting Node.js, including high-severity vulnerabilities that may affect applications using vulnerable Node.js versions.
Our teams have assessed the applicability of these vulnerabilities to the Freshworks environment and implemented the necessary fixes across affected production systems. Based on the information currently available, we have not identified any evidence of exploitation or impact to Freshworks systems or customer data.
In addition to remediation, Freshworks maintains multiple layers of security controls to help protect its systems and customer data. These include:
- Web Application Firewalls (WAF): Protections designed to detect and block malicious traffic.
- Cloud Security Controls: Safeguards across our cloud infrastructure to strengthen our security defenses.
- Continuous Monitoring: Ongoing monitoring and alerting to help identify and respond to suspicious activity.
We continue to monitor relevant security developments and assess potential risks to our environment. We will update this notification if new information materially affects our assessment.
For any further questions or concerns, please contact security@freshworks.com.
Freshworks update on PHP vulnerabilities
Freshworks is aware of recently reported vulnerabilities affecting PHP, including vulnerabilities that may pose security risks to applications using affected PHP versions.
Based on our current assessment, Freshworks applications and infrastructure are not affected by these vulnerabilities, and we have found no impact to Freshworks customer data. This assessment considers the applicability of the reported vulnerabilities to our environment, including relevant third-party dependencies.
We continue to monitor relevant security developments and assess potential risks to our environment. We will update this notification if new information materially affects our assessment.
Our commitment to the security of our services and customer data remains our top priority. Thank you for your continued trust in Freshworks.
For any further questions or concerns, please contact security@freshworks.com.
