Nylas, Inc.:
Trust Center
About

Important Notice: As of October 23, 2026, Nylas services are not affected by the PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619). For details, see the PHP2Shell Q&A under Questionnaires.

Nylas is a powerful unified API platform that provides developers like you with tools to integrate email, calendar, and contact functionality into your applications across multiple providers like Gmail, Microsoft, IMAP, and others. Nylas also supports webhooks, which allow applications to receive real-time updates on changes in emails, calendars, and contacts.

  • For Security FAQs, visit https://www.nylas.com/security/#FAQs
  • Note about DPAs: 
    • If you have an annual contract with Nylas, reach out to your Nylas Account Executive / Sales contact for a DPA. 
    • If you are a pay-as-you-go customer, the Data Privacy Section (Section 5) in your standard order terms covers DPA terms. 
    • If you are an end customer using our product through a vendor or partner, please contact your vendor directly for a DPA. We do not enter into DPAs directly with end customers
  • Nylas API Documentation: https://developer.nylas.com/docs/v3/getting-started/  
Audits and Certifications10
badge
GDPR
badge
HIPAA
1 Document
badge
ISO 27001
1 Document
badge
ISO 27701
1 Document
badge
CSA STAR Level 1
badge
CCPA
badge
SOC 2
3 Documents
badge
CPRA
badge
Data Privacy Framework
badge
ADA Tier 2 CASA Verified
Questionnaires7
badge
CAIQ
badge
SIG Lite
badge
SIG Core
badge
VSA
1 Document
badge
Oracle Cloud Data Breach 2025
badge
Microsoft Sharepoint Zero Day
badge
PHP2Shell Vulnerability - Oct 2026
Additional Documents50
Nylas Security Policies and Procedures (28)
AI FAQs & Whitepapers (3)
Security & Privacy Whitepapers (5)
External Penetration Test Reports (2)
Architecture Diagrams (5)
Privacy (4)
ISO - Statement of Applicablity (1)
PCI-DSS SAQ A (1)
CASA Tier 3 - Shared GCP Application (1)
lightbulb
Assurance Center
Domains
Sub-domains