SOC 2-Compliant Marketing Vendors
Marketing vendors that hold SOC 2 certification
Marketo
8/32Marketing automation platform, now Adobe Marketo Engage within Adobe Experience Cloud.
Optimizely
7/32Digital experience and experimentation (A/B testing) platform.
Klaviyo
6/32Email and SMS marketing automation platform built for e-commerce.
Sprout Social
4/32Social media management, engagement, and analytics platform.
Type II and Type I
ActiveCampaign
3/32Customer experience automation platform combining email marketing, marketing automation, and CRM.
Braze
3/32Customer engagement platform for cross-channel messaging (push, email, SMS, in-app).
Hootsuite
3/32Social media management and scheduling platform.
Type II
Mailchimp
2/32Email marketing and marketing automation platform, owned by Intuit.
Inherited from parent company Intuit's SOC program; not separately itemized for Mailchimp on its own security page
Iterable
2/32Cross-channel customer engagement and marketing automation platform.
Listed on vendor trust center
VWO
2/32A/B testing, conversion rate optimization, and experimentation platform.
SOC 2 Type II reported by vendor
Salesforce Pardot
1/32B2B marketing automation platform, now branded Marketing Cloud Account Engagement.
Own dedicated SOC 2 report published on Salesforce Compliance site
Instapage
1/32Landing page and post-click optimization platform for marketing teams.
SOC 2 Type II reported by vendor
Oracle Eloqua
0/32B2B marketing automation platform running on Oracle Cloud Infrastructure.
Inherited from Oracle Cloud Infrastructure platform-level attestation
These marketing vendors do not currently hold SOC 2 certification:
Know a vendor we're missing?