Security & Compliance: Trustpilot’s SOC 2 Report
At Trustpilot, building and maintaining trust is at the core of everything we do.
We understand that when you choose our platform, you're entrusting us with your data and the data of your customers.
To give you confidence in our security, our SOC 2 report provides a clear and independently verified look at how we protect our platform and your data.
Report Summary
Report Type: SOC 2 Type 2
Service Auditor: Deloitte
Most Recent Report: 1 January 2025 - 31 December 2025
Opinion: Unqualified
Expected Report Issuance: The report for the 2026 period is expected to be available in March 2027
How can I request Trustpilot's SOC 2 report?
The full SOC 2 Type 2 attestation report is available upon request. Please complete the form below, and our team will initiate the process.
How often are the SOC 2 reports issued?
Our SOC 2 Type 2 report is issued annually and covers a 12-month period. Our reporting cycle aligns with the calendar year (January 1 - December 31).
Can I get a bridge letter for the period since the last report?
Yes. For customers who have received the SOC 2 report, we can provide a bridge letter. This letter covers the period between the date of our last audit and a more recent date, stating that we are continuing to maintain our control environment. Please complete the form below to request a bridge letter.
Who do I contact with questions or additional requests?
If you have any other questions or requests, please email security@trustpilot.com and we can assist you with that request.
Request a copy of the report
By submitting the form below or accessing any documents shared through this form, you acknowledge that you have read, understood, and agree to be bound by the Confidentiality Agreement for Security Documentation.
By submitting this form Trustpilot will use your contact details to discuss our products and services. Please read our Privacy Policy, which explains how we collect, use, and protect your personal data.
This site is protected by reCAPTCHA. We collect device and interaction signals for security purposes as described in our Privacy Policy.