Trust Center

Start your security review

View & download sensitive information

Overview

Welcome to Merge's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.

Compliance

UK Extension to EU-US DPF

ISO/IEC 27001:2022

Merge is reviewed and trusted by

OpenAI

Mistral AI

Lattice

Freshworks Inc

Ramp

Drata

Documents

REPORTSISO 27001

REPORTSPentest Report

REPORTSSecurity Whitepaper

REPORTSSOC 2 Report

COMPLIANCEISO/IEC 27001:2022

COMPLIANCESOC 2 Type 2

DATA SECURITYEncryption-at-rest

APP SECURITYApplication Penetration Testing

POLICIESAcceptable Use Policy

POLICIESAsset Management Policy

POLICIESBusiness Continuity/Disaster Recovery (BC/DR) Policy

POLICIESIncident Response Policy

Reports

Data Flow Diagram (DFD)

Network Diagram

Data Security

Encryption-at-rest

Encryption-in-transit

App Security

Responsible Disclosure

Application Penetration Testing

AI

AI Risk Management

ESG

Anti-Competitive Practices

Effective Board Oversight

Legal

Cyber Insurance

Data Processing Agreement

Data Privacy

Data Breach Notifications

Data Into System

Access Control

Access Log Management

Infrastructure

Capacity Planning & Management

Container Orchestration

Endpoint Security

Disk Encryption

Software Firewall

Network Security

Data Loss Prevention

Distributed Denial of Service Protection (Anti-DDoS)

Corporate Security

Asset Management Practices

Employee Handbook

Personnel Termination/Transfer

Policies

Acceptable Use Policy

Asset Management Policy

Business Continuity/Disaster Recovery (BC/DR) Policy

Security Grades

We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.

Incident Response

Designated Response Personnel

Forensic Retainer

Incident Reporting Process

Asset Management

Asset Inventories (Hardware/Software)

IT Asset Management (ITAM) Program

BC/DR

Alternate Processing/Storage Site

Business Continuity Management System (BCMS)

Business Continuity Plan (BCP)

Training

Employee Privacy Training

Phishing Training

Role-Based Training

Change Management

Change Management Program

Change Restrictions

Changes Notification & Verification

Physical & Environment

Alarms & Surveillance

Physical Access Security

Remote Telework

Continuous Monitoring

Automated Alert Response

Automated Compliance Monitoring

Data Loss Prevention System (DLP)

Subprocessors

If you need help using this Trust Center, please contact us.

Contact support