SOC 1-Compliant Analytics Vendors
Analytics vendors are evaluated against SOC 1 when they handle the workflows this framework governs. Currently, 7 vendors in our Analytics category hold SOC 1 certification. Each listing below links to the vendor's full compliance profile.
Analytics vendors that hold SOC 1 certification
Power BI
19/32Business intelligence and data visualization platform, part of Microsoft's compliance program (same certifications as Microsoft 365/Azure).
Amplitude
12/32Product analytics and digital optimization platform for behavioral analytics and experimentation.
SOC 1 Type 2 report (valid through October 2026) listed on Trust Center
Looker
12/32Business intelligence and data analytics platform on Google Cloud with LookML semantic modeling.
SOC 1 included in Google Cloud SOC reports covering Looker
Qlik
11/32Business intelligence, data integration, and analytics platform.
Domo
8/32Cloud-based business intelligence and data visualization platform.
ThoughtSpot
6/32AI-powered analytics and business intelligence platform.
Google Analytics
6/32Web and app analytics platform by Google.
These analytics vendors do not currently hold SOC 1 certification:
- Mixpanel (not documented)
- Tableau (not documented)
- Hotjar (not documented)
- Crazy Egg (not documented)
- Sisense (not documented)
- Heap (not documented)
- Adobe Analytics (not documented)
- SurveyMonkey (not documented)
- Typeform (not documented)
- Jotform (not documented)
- Qualtrics (not documented)
- Alchemer (not documented)
- Formstack (not documented)
- Pendo (not documented)
- FullStory (not documented)
- LogRocket (not documented)
- PostHog (not documented)
Know a vendor we're missing?