8x8

Communications United States Website Reviewed Sept. 2, 2026

Cloud phone, video and contact centre platform with a significant UK customer base and UK data centres.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body 8x8 cloud communications platform and supporting ISMS Current
ISO 27017 and ISO 27018 Accredited third-party certification body Cloud security controls and protection of PII in public cloud Current
SOC 2 Type II Independent third-party auditor 8x8 services; report available to customers under NDA Current
PCI DSS Qualified Security Assessor 8x8 contact centre payment handling components Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
UK and EU data centres available; processor under its DPA
PCI DSS v4.0
Partial
Applies to contact centre payment handling
Cyber Essentials
Partial
Verify current Cyber Essentials status for the UK entity

Assess 8x8 in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.