// Trust & Security Report
Grammarly
by Superhuman Platform Inc. (formerly Grammarly)
AI-powered writing assistance and productivity platform. Consumer tiers: Free, Premium, Pro; enterprise tier: Enterprise. Additional products: Superhuman Go (productivity agents), Superhuman Mail (email), Grammarly for Education, Docs.
Certifications held
10
Maturity
Enterprise
Trains on your data
Yes
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on grammarly.com“Lessons From Our Journey to Obtain Our SOC 2 Report and ISO Certifications”
Verify on grammarly.com“of ISO 42001 ensuring responsible AI development and use. Read our certificate. SOC 3 Grammarly’s SOC 3 report describes our validated controls regarding security, privacy, availability, and”
Verify on grammarly.com“ty, and confidentiality trust services criteria. Contact us to read our report. ISO/IEC 27001:2022 Grammarly’s information security management system meets the requirements of ISO 27001 and 27002 international sta”
Verify on grammarly.com“security, privacy, availability, and confidentiality. Read our public report. ISO/IEC 27017:2015 Grammarly’s information security practices meet the requirements of ISO 27017 regarding our provision and use of”
Verify on grammarly.com“uirements of ISO 27001 and 27002 international standards. Read our certificate. ISO/IEC 27018:2019 Grammarly meets the requirements of ISO 27018 regarding our protection of personally identifiable information (PII”
Verify on grammarly.com“27017 regarding our provision and use of cloud services. Read our certificate. ISO/IEC 27701:2019 Grammarly's privacy information management system meets the requirements of ISO 27701 international standards. Rea”
Verify on grammarly.com“personally identifiable information (PII) in the cloud. Read our certificate. ISO/IEC 42001:2023 Grammarly meets the requirements of ISO 42001 ensuring responsible AI development and use. Read our certificate.”
Verify on grammarly.com“Payment card industry data security standard - Active compliance”
Verify on grammarly.com“attestations, and you can also see our SOC 2 (Type 2) and SOC 3. Is Grammarly GDPR compliant? Yes, Grammarly is GDPR-compliant. Please see our Privacy Policy for details. Where does Grammarly store data”
Verify on grammarly.com“our sales team to request the documentation you’re looking for. Is Grammarly HIPAA compliant? Yes, Grammarly is HIPAA compliant. Please note that as per our Acceptable Use Policy, you should not store,”
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
US East (AWS) with international transfers. EU/UK/Swiss users covered by Data Privacy Framework
Grammarly can use customer data to train AI models by default for Free/Premium/Pro tiers. OFF by default for Enterprise, Business, and Education tiers. Users can disable via Product Improvement and Training control in account settings. Grammarly restricts third-party AI service providers from training on customer content.
// Security controls
Infrastructure
Amazon Web Services (US East region) with native backup tools, load balancers, and web application firewalls
grammarly.comVulnerability management
Third-party penetration testing and HackerOne bug bounty program
grammarly.comData ownership
User words are owned by users; Grammarly does not sell or monetize user content
grammarly.com// Products & data scope
Data it handles: User writing content for grammar/clarity checks
AI training enabled by default. Basic writing features. No cost.
Data it handles: User writing content including tone and style suggestions
AI training enabled by default. Advanced suggestions, tone detection, plagiarism checker.
Data it handles: User writing content with team collaboration
AI training ON by default for single-user and web-purchased plans; OFF by default for Sales-team purchases. Generative AI features, style guides, team collaboration.
Data it handles: Organization writing content with confidential mode option
AI training OFF by default. Confidential mode, granular permissions, data loss prevention, unlimited users, dedicated support.
Data it handles: Workspace/document data for AI-powered workflows
Part of Superhuman Platform acquisition. Productivity agents for docs and workflows.
Data it handles: Student writing submissions
AI training OFF by default for all education accounts.
// What to watch
- Grammarly has been acquired by and merged into Superhuman Platform Inc. Privacy policy and DPA inquiries now redirect to the Superhuman domain; verify the ongoing separation of product tiers.
- Consumer Free, Premium, and Pro tiers have AI training enabled by default. While opt-out is clearly available, this differs from the Enterprise posture, where training is off by default, so tier selection matters during procurement.
- Primary infrastructure runs in AWS US East. While DPA compliance is stated, EU/UK users should confirm data localization requirements.
- HIPAA compliance is conditional on executing a Business Associate Agreement. It is not a default feature; users must request and execute the agreement.
// At a glance
Pricing model
Freemium (Free tier + Premium monthly/yearly + Pro + Enterprise contact sales)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Superhuman Platform Inc. (formerly Grammarly)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
grammarly.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.