// Trust & Security Report
ManyChat, Inc.
Social messaging chatbot automation platform for Instagram, WhatsApp, TikTok, and Facebook Messenger. Includes ManyChat AI for automated workflow generation.
Certifications held
6
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on cloudsecurityalliance.org“Information Security Management System (ISMS) certified against the ISO/IEC 27001:2022 standard”
Verify on manychat.com“Artificial Intelligence Management System (AIMS) has been certified against the ISO/IEC 42001:2023 standard”
Verify on manychat.com“PCI DSS v4.0.1 SAQ-A compliance for secure payment operations”
Verify on manychat.com“Active certification under the EU–US, Swiss–US, and UK Extension of the Data Privacy Framework (DPF)”
Verify on cloudsecurityalliance.org“Listed as Trusted Cloud Provider in Cloud Security Alliance (CSA) STAR Registry with Level 1 badge status”
> Show 1 unconfirmed / not-held certifications
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
United States (with DPF certification for EU/UK transfers)
ManyChat contractually restricts AI Providers from using User Generated Content for training or otherwise improving such AI Provider's services for general use. Data is used only for: (i) providing AI Features functionalities; (ii) maintaining, improving, modifying, and developing AI Features; (iii) compliance with applicable laws; and (iv) enforcing policies. Customers can opt-out of AI data collection.
// Security controls
Data encryption at rest
Industry-standard encryption per ISO 27001 requirements
cloudsecurityalliance.orgAccess management
Role-based access controls, multi-factor authentication, privileged access management
manychat.comIncident response
Incident handling policies and procedures; external independent security audits on annual basis
manychat.comBusiness continuity
Disaster recovery and business continuity plan per ISO 27001 framework
manychat.com// Products & data scope
data: User DMs, comments, story mentions; customer contact info
Official Meta Business Partner; complies with Meta data use policies
data: WhatsApp messages and customer contact data
Integrates with WhatsApp Business API
data: TikTok DMs, comments, follower data
Official TikTok partner
data: Messenger conversations and customer contact data
data: Conversation flows, user inputs for AI workflow generation
ISO/IEC 42001:2023 certified; does not train on customer data without restriction
data: SMS contact lists and message content
Complies with TCPA and SMS regulations
// At a glance
Pricing model
Freemium SaaS with usage-based tiers (contacts, messages, channels)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on ManyChat, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
manychat.com