Zendesk

SaaS / Software United States Website Reviewed Sept. 2, 2026

Customer service and ticketing suite: email, chat, voice and help centre, with AI agents and workforce management add-ons.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Zendesk Suite production services and supporting ISMS Current
ISO/IEC 27018:2019 Accredited third-party certification body Protection of PII in public cloud for Zendesk services Current
ISO/IEC 27701:2019 Accredited third-party certification body Privacy information management system extension to the Zendesk ISMS Current
SOC 2 Type II and SOC 3 Independent third-party auditor Zendesk Suite. SOC 3 published publicly; SOC 2 available to customers under NDA Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Zendesk acts as processor under its DPA; SCCs, UK IDTA and EU/US DPF available
PCI DSS v4.0
Partial
PCI DSS relevant to the Zendesk credit card redaction and payment add-ons
HIPAA Security
Partial
HIPAA-enabled plan with a BAA available for eligible Zendesk products

Assess Zendesk in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.