CircleCI

circleci.com · facts updated 1 hour ago

Privacy facts at a glance

Jurisdictions: US · EU · UK
Retention: The privacy policy references a 'Data Retention' section but the specific retention period is not stated in the provided excerpts.
Breach notification: The trust center lists 'Data Breach Notifications' as a topic but no specific notification SLA is stated in the provided excerpts.
Transfer mechanism: EU-US Data Privacy Framework, UK Extension to EU-US DPF, and Swiss-US Data Privacy Framework
DPA available: Yes
Certifications: SOC 2 Type II · FedRAMP Tailored LI-SaaS · CSA STAR Level 1 · CSA STAR for AI · EU-US DPF · Swiss-US DPF · UK Extension to EU-US DPF
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://circleci.com/legal/privacy/ checked 1 hour ago

https://circleci.com/legal/terms-of-use/ checked 1 day ago

Subprocessor list

https://trust.circleci.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 checked 38 minutes ago

Security / trust page

https://circleci.com/security/ checked 1 day ago

moderate Privacy policy 1 hour ago

CircleCI added 'Startup program' as a referenced item in their privacy policy.

Public summary; per-account review history visible to subscribers tracking this vendor.

Get notified when CircleCI adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

No card required.