Decagon — trust-center changed (review)

Decagon, a conversational AI platform for building and managing AI agents, updated its public trust center, adding "Unique production database authentication enforced" and "Production inventory maintained" to its infrastructure and organizational security controls while removing "Production application access restricted," "Anti-malware technology utilized," and "Vulnerability and system monitoring procedures established." The trust center lists compliance with SOC 2 Type II, GDPR, CCPA, HIPAA, the EU AI Act, ISO 27001:2022, and PCI DSS 4.0.1, and names Google Cloud Platform, OpenAI, Amazon Web Services, and Azure as subprocessors. The changes were logged as updated 1 minute ago, with the removed items marked as updated 14 minutes ago.

Decagon's trust-center changed Decagon Decagon is the conversational AI platform that transforms customer interactions with AI agents. Seamlessly build, manage, and scale AI agents with Agent Operating Procedures AOPs . Compliance SOC 2 Type II GDPR CCPA HIPAA EU AI ACT ISO 27001:2022 PCI DSS 4.0.1 Resources View 2 more Pentesting Other resources Decagon - Information Security Overview June 2026.pdf Decagon - EU AI Act Transparency Statement and Limited Risk Assessment.pdf Controls REMOVEDUpdated 14 minutes ago ADDEDUpdated 1 minute ago Infrastructure security REMOVEDEncryption key access restricted Unique account authentication enforced Production application access restricted View 15 more Infrastructure security controls ADDEDUnique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced REMOVEDProduction application access restricted View 15 more Infrastructure security controls ADDEDView 18 more Infrastructure security controls Organizational security REMOVEDAsset disposal procedures utilized Portable media encrypted Anti-malware technology utilized View 10 more Organizational security controls ADDEDAsset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Asset disposal procedures utilized ADDEDProduction inventory maintained Portable media encrypted REMOVEDAnti-malware technology utilized View 10 more Organizational security controls ADDEDView 11 more Organizational security controls Product security REMOVEDControl self-assessments conducted Penetration testing performed Vulnerability and system monitoring procedures established ADDEDData encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Data encryption utilized Control self-assessments conducted Penetration testing performed REMOVEDVulnerability and system monitoring procedures established ADDEDView 2 more Product security controls Internal security procedures REMOVEDContinuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 30 more Internal security procedures controls ADDEDContinuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 34 more Internal security procedures controls Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained REMOVEDView 30 more Internal security procedures controls ADDEDView 34 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors Google Cloud Platform Cloud hosting provider Infrastructure Provider providing hosting services, storage and AI services OpenAI Large Language Model and AI services Large language models and AI provider Amazon Web Services Cloud provider Azure Infrastructure Provider providing hosting services and storage