Your data is safe with us

SerpApi handles the data of multiple Fortune 500 companies.
We follow the best security, privacy, and compliance practices.

Transparency

As part of our commitment to transparency, we - at SerpApi - continually inform our users about our products and operations. We understand the importance of providing clear information about our audits, compliances, security, and privacy enforcement.

SerpApi security

Trusted by top companies and brands.

  • Nvidia
  • Shopify
  • Perplexity
  • Adobe
  • Samsung
  • KPMG

Security features and policies

Customer trust and data security are critical to everything we do at SerpApi.

  • Encryption

    100% of our website pages, API requests, and resources go through HTTPS. Our SSL certificate is issued by Cloudflare, Inc (ECC CA-3). Encrypted and authenticated using QUIC, X25519, and AES_128_GCM.

  • Password and Credential Storage

    SerpApi made it impossible for anyone to access our user passwords. We use one-way password hashing using the BCrypt hash algorithm for every user. We produce audit logs for all critical parts of SerpApi.

  • Data Security

    AWS S3 and database security (multiple redundancy, encryption in transit even between local servers). We follow a Zero Trust Network doctrine: All of our VPS are assumed to be exposed via the Internet.

Compliance

Building trust through industry-recognized certifications.

  • SerpApi SOC 2 Type II SOC 2

    Service Organization Controls (Soc2) (Type II) Trust Services Principles.

    Acquired
  • SerpApi SOC 2 Type II SOC 3

    Service Organization Controls (Soc3).

    Acquired
  • SerpApi ISO 27001 ISO 27001

    International Standard for Information Security.

    Acquired
  • SerpApi ISO 27701 ISO 27701

    International Standard for Privacy Information Management.

    Acquired
  • SerpApi EWDCI EWDCI

    Ethical Web Data Collection Initiative Trust Seal.

    Acquired
  • SerpApi GDPR GDPR

    The General Data Protection Regulation.

    In Progress
  • SerpApi ISO 42001 ISO 42001

    International Standard for AI Management Systems.

    In Progress

Privacy & ISO 27701

SerpApi operates a Privacy Information Management System (PIMS) aligned with ISO/IEC 27701, extending our ISO 27001 certified information security program.

  • Purpose Limitation

    Customer PII processed by SerpApi on behalf of customers is used only for the purpose of providing the contracted services and is not used by SerpApi for unrelated marketing or advertising purposes.

  • Data Retention & Deletion

    Search data expires automatically after 31 days. ZeroTrace Mode prevents search data from being stored entirely. See our Data Retention & Deletion policy.

  • Subprocessors & Privacy Requests

    Our subprocessor list, cookie disclosures, and privacy request routes are published in our Privacy Policy. Privacy contact: privacy@serpapi.com.

Security questions?

Don't hesitate to ask. Please get in touch with our support team at security@serpapi.com.

You can find all of our policies here