Frontify

Frontify

Search the Trust Center...
Ctrl +K

Frontify | Trust Center

Everything you need to complete your security review is here. Browse documents, certifications, and compliance details with confidence. Our Trust Center is regularly updated to reflect the latest audit results, and subprocessor disclosures.

Quick links


About us

Frontify

Frontify is a cloud-based brand management platform designed to help organizations create, manage, and maintain brand consistency across various channels and teams. It offers a centralized space for storing and sharing brand assets, guidelines, and templates.

Too marketing-y? We've got you; Frontify is a cloud-based platform hosted on AWS (US or EU, depending on your preference) where companies store and manage their logos, social media templates, brand pictures and font colors.

Security at Frontify

Security is at the core of our culture and our product. Through a combination of technical controls, ongoing assessments, and collaboration across teams, we maintain a resilient platform that prioritizes the security of our customers’ data and brand assets.

Typical data access: Frontify primarily processes customer brand materials that are already public or intended for public use. The data subjects are typically customer employees or design agency personnel. The personally identifiable information (PII) processed stems from business nature and includes name, surname, password, email address, and client IP address (for Frontify Map functionality and security logging). Additionally, optional data such as profile pictures and job titles may also be processed.


Compliance program

soc2-type-2
SOC 2 Type II
iso-27001-2022
ISO 27001:2022
cyber-essentials
Cyber Essentials
tisax
TISAX
swiss-us-dpf
Swiss-US DPF
gdpr
GDPR
pci
PCI
hipaa
HIPAA

Trusted by

Uber
Microsoft
Nestlé
Volkswagen
Lufthansa
Bosch
Vodafone GmbH

Quick Summary

One or more annual third-party audit(s)

Has a formal mobile device management (MDM) program

Annual third-party penetration testing

Has a disaster recovery plan

Has cyber insurance

Has a bug bounty or vulnerability disclosure program

Deletes customer data on request

Uses a centralized IAM solution (SSO) to manage employee access


Find an answer


Subprocessors
8

Subprocessor
Location of Processing
Usage Details
Amplitude

Amplitude

Germany
Anonymized product analytics
AWS

AWS

Germany, United States
Cloud service provider
Datadog

Datadog

Germany
Monitoring and observability of the Frontify Platform
Frontify

Frontify

France, Germany, United Kingdom, United States, Switzerland
Support services by Frontify AG and its affiliates (Frontify Inc., Frontify UK Ltd., Frontify Deutschland GmbH, and TwicPics SAS)
Intercom

Intercom

United States
In-app support / User onboarding / Feedback collection / Product updates / Knowledge base
Microsoft

Microsoft

Germany
Azure AI services to power the AI Features.
Postmark

Postmark

United States
Transactional email service
Splunk

Splunk

Germany
Security Information and Event Management tool (SIEM)
Last updated . .
View as:

Announcements

SOC 2 Type II Report Now Available

We're pleased to share that Frontify has successfully completed its first SOC 2 Type II examination, reinforcing our commitment to protecting customer data and maintaining a mature security program.

This milestone marks the beginning of our ongoing SOC 2 program. As part of our commitment to continuous improvement, future SOC 2 Type II examinations will cover a longer observation period and an expanded scope.

The SOC 2 Type II report is available upon request through our Trust Center.


Security Update – New FAQs Available

The Frontify Information Security team is pleased to share that we’ve just published a new Security Q&A section in our Trust Center!
It includes answers to the most frequently asked security questions from customers and prospects, designed to help you quickly and easily find key information on security policies, certifications, procedures, and more.
Feel free to explore it and reach out to us if you have any further questions!


Powered by Conveyor, the first end-to-end customer trust platform.
Learn more