SOC 2-Compliant Sales & CRM Vendors

Sales & CRM vendors are evaluated against SOC 2 when they handle the workflows this framework governs. Currently, 17 vendors in our Sales & CRM category hold SOC 2 certification and 1 holds it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Sales & CRM vendors that hold SOC 2 certification

Salesforce logo

Salesforce

27/32

Leading cloud-based CRM platform for sales, service, marketing, and customer engagement.

Gong logo

Gong

14/32

Revenue intelligence platform that captures and analyzes customer interactions across calls, email, and messaging.

Outreach logo

Outreach

11/32

Sales engagement and revenue workflow platform for pipeline generation and deal execution.

HubSpot logo

HubSpot

10/32

All-in-one CRM platform combining marketing, sales, service, and content hubs.

Zoho CRM logo

Zoho CRM

10/32

Cloud CRM for sales, marketing, and customer support, part of the Zoho suite.

Freshsales logo

Freshsales

10/32

Sales CRM from Freshworks with built-in phone, email, and AI-based lead scoring.

Pipedrive logo

Pipedrive

9/32

Visual sales CRM and pipeline management platform for small and mid-sized teams.

Apollo logo

Apollo

7/32

B2B sales intelligence and engagement platform with a large contact database and outbound automation.

SOC 2 Type 2 covering Security, Availability, Confidentiality

SugarCRM logo

SugarCRM

6/32

CRM platform (now branded SugarAI) with sales, marketing, and customer service modules.

Insightly logo

Insightly

4/32

CRM and project management platform for small and mid-sized businesses.

Salesloft logo

Salesloft

4/32

Sales engagement platform; now also operates the Drift conversational marketing product following its 2024 acquisition.

Clari logo

Clari

4/32

Revenue operations and forecasting platform; merged with Salesloft in December 2025.

Close logo

Close

3/32

Inside-sales CRM with built-in calling, email, and SMS for SMB sales teams.

Copper logo

Copper

2/32

CRM built for Google Workspace, focused on relationship-driven sales teams.

ZoomInfo logo

ZoomInfo

2/32

B2B contact and company data platform for sales and marketing intelligence.

Lusha logo

Lusha

2/32

B2B contact and company data platform for sales prospecting.

SOC 2 Type II reported by vendor

Clay logo

Clay

2/32

Data enrichment and outbound sales automation platform combining 75+ data providers.

SOC 2 Type II

Chorus.ai logo

Chorus.ai

0/32

Conversation intelligence platform for sales calls, acquired by ZoomInfo in 2021.

Chorus.ai was acquired by ZoomInfo in 2021; compliance now follows ZoomInfo's program rather than a standalone Chorus.ai certification

These sales & crm vendors do not currently hold SOC 2 certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026