Is Intercom (Fin) SOC 2 compliant? Yes, SOC 2 Type II, plus ISO 42001 and AIUC-1.
Intercom lists a SOC 2 Type II Report in its Trust Center, along with an ISO 27001 & ISO 27018 certificate and a HIPAA attestation report. It is also ISO/IEC 42001 certified (the AI management standard, achieved April 2025) and AIUC-1 certified (achieved December 2025), so Fin passes all seven of our criteria, 7 of 7.
Source: trust.intercom.com (SOC 2 Type II Report, ISO 27001 & ISO 27018 Certificate, HIPAA Attestation Report) and Intercom’s ISO 42001 and AIUC-1 announcements. Editorial vetting, not a compliance certification; verify directly before purchase.
Intercom rebranded its company to Fin in 2026, and on 15 June 2026 Salesforce signed a definitive agreement to acquire Fin for approximately $3.6 billion. The deal is expected to close in the fourth quarter of Salesforce’s fiscal 2027 and has not yet completed. The certifications, pricing, and trust-center references below reflect Fin as an independent company at the April 2026 review and predate any integration into Salesforce’s Agentforce platform. Confirm current certification scope, pricing, and contract terms before purchase. Salesforce announcement
Intercom Fin GDPR, DPA and data residency, in detail
Does Intercom Fin offer a DPA (Data Processing Agreement)?
Yes. Intercom publishes a Data Processing Agreement at intercom.com/legal/data-processing-agreement, incorporated into its Terms of Service. It includes the European Commission's June 2021 Standard Contractual Clauses for international transfers, and Intercom relies on its certification under the EU-US, UK Extension, and Swiss-US Data Privacy Frameworks for restricted transfers to the US.
Does Intercom Fin offer EU data residency?
Yes, with a caveat. Customers choose a designated hosting region at setup: the United States (AWS us-east-1), the European Union (AWS Dublin, eu-west-1), or Australia (AWS Sydney). EU hosting is available on the Business plan and above. Storing data in Dublin does not on its own keep all processing inside the EEA: Fin's AI model inference relies on US sub-processors such as OpenAI and Anthropic, so a transfer impact assessment for the model-inference path is still needed even when data is stored in the EU.
Where is Intercom Fin data hosted?
In Amazon Web Services facilities in the United States (us-east-1), Dublin, Ireland (eu-west-1), and Sydney, Australia. Each customer is pinned to one designated region. The US-based AI model providers Fin uses for inference are listed, alongside the other sub-processors, in Intercom's public sub-processor register.
Sources: intercom.com/legal/data-processing-agreement, regional data hosting. Editorial vetting, not a compliance certification; verify directly before purchase.
Intercom Fin
7/7 criteria7-Criterion Scorecard
Public Reference Customers
- ✓Anthropic[www.intercom.com]
- ✓Bark[www.intercom.com]
Pricing Transparency
Model: Per resolution
www.intercom.com/pricingData Residency and Training Opt-Out
Regions: US, EU, AUS
Training opt-out: Yes, available
Retention: Configurable; designated hosting region (US / EU-Dublin / AUS-Sydney) selected at setup
www.intercom.com/help/en/articles/8106177-how-data-is-hosted-and-processed-in-intercomOutcome Accountability
Time in Market
Founded: 2011
Public launch: 2011
Customers (min triangulated): 25,000+
Team Composition
Founders: Des Traynor, Eoghan McCabe, David Barrett, Ciaran Lee
www.intercom.com/aboutFor detailed pricing and comparison data for Customer Service vendors, see AI Agent for Customer Service pricing comparison.