Library / Vendor directory

Ramp

ramp.com · facts updated 1 day ago

Privacy facts at a glance
Jurisdictions
US · EU · CA
Subprocessors
8
Retention
The trust center FAQ mentions 'How long does Ramp retain customer data?' but the actual retention period is not stated in the available text.
DPA available
Yes
Certifications
CCPA · ISO/IEC 27001 · PCI DSS · SOC 1 Type 2 · SOC 2 Type 2 · FedRAMP Certified Class C · Cyber Essentials Plus · GovRAMP · TX-RAMP
CCPA addressed
Yes
Named subprocessors
Modal Together AI Cerebras Amplitude Inc. Astronomer, Inc Cloudflare Duffel Technology Ltd. Sierra Technologies Inc.

Tracked documents

Privacy policy
https://ramp.com/legal/privacy-policy checked 16 hours ago
Terms of service
https://ramp.com/legal/platform-agreement checked 1 hour ago
Data processing agreement
https://ramp.com/legal/customer-terms/services-terms/dpa checked 18 hours ago
Security / trust page
https://trust.ramp.com/ checked 17 hours ago

Recent changes

major Data processing agreement 1 day ago

Ramp's Data Processing Addendum page was replaced with a JavaScript-required placeholder, removing all visible DPA content including definitions, processing roles, subprocessor terms, international transfer annexes, and jurisdiction-specific terms.

major Data processing agreement 2 days ago

Ramp published a new Data Processing Addendum covering definitions, roles, CCPA, subprocessors, international transfers (EEA/UK/Switzerland, Brazil, India/DPDPA), SCCs, liability, and technical/organizational measures, replacing a prior page that required JavaScript to render.

major Security / trust page 2 weeks ago

Ramp added the Cyber Essentials Plus certification to its security/trust page.

major Subprocessor list 2 weeks ago

Ramp added Cyber Essentials Plus to its subprocessor list.

major Security / trust page 2 weeks ago

Ramp's security page replaced the listed FedRAMP authorization level from 'FedRAMP Moderate' to 'FedRAMP Certified Class C'.

major Subprocessor list 2 weeks ago

Ramp's subprocessor list replaced the FedRAMP authorization level 'FedRAMP Moderate' with 'FedRAMP Certified Class C' for a subprocessor entry.

major Security / trust page 3 weeks ago

Ramp's security page added a PCI DSS certification/compliance listing and removed the 2025 Ramp Mobile Penetration Test Report, while Email Protection appears in both additions and removals suggesting a reordering or re-listing with no net change.

major Subprocessor list 3 weeks ago

Ramp's subprocessor list was updated to add PCI DSS and remove the 2025 Ramp Mobile Penetration Test Report, while Email Protection appears in both additions and removals indicating a re-listing or replacement.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Ramp in your workspace.

Get notified when Ramp adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial
No card required.