RingCentral

Communications United States Website Reviewed Sept. 2, 2026

Cloud phone system, video meetings and contact centre, commonly replacing on-premise PBX in SMBs.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body RingCentral cloud communications platform and supporting ISMS Current
ISO 27017, ISO 27018 and ISO 27701 Accredited third-party certification body Cloud security, PII protection and privacy information management for RingCentral Current
SOC 2 Type II and SOC 3 Independent third-party auditor RingCentral services. SOC 3 published publicly; SOC 2 available under NDA Current
PCI DSS Qualified Security Assessor RingCentral contact centre payment handling components Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
UK and EU data centres available; processor under its DPA
PCI DSS v4.0
Partial
Applies to contact centre payment handling
HIPAA Security
Partial
HIPAA BAA available on eligible plans

Assess RingCentral in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.