// Trust & Security Report
Perplexity
AI answer engine / conversational search (consumer, Pro/Max, Enterprise, and API)
Certifications held
6
Maturity
Enterprise
Trains on your data
Yes
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on trust.perplexity.ai“tab Compliance Policies FedRAMP 20x Self Assessments Other resources Compliance SOC 2 Type 2 Report Copy link for SOC 2 Type 2 Report Request accessSOC 2 Type 2 Report ISO/IEC 27001:2022 Certificate Copy”
Verify on trust.perplexity.ai“C 2 Type 2 Report ISO/IEC 27001:2022 Certificate HIPAA Gap Assessment Final.pdf PCI-DSS_2026.pdf View 1 more Policies Business Continuity Management Policy Data Management Policy Incident Response Plan Risk”
Verify on fedramp.gov“Trust Center lists 'FedRAMP 20x: Perplexity AI: FedRAMP 20x Low Information ... Perplexity AI FedRAMP 20x Low OAR - 2026 Q1.docx'. FedRAMP Marketplace lists 'Perplexity Enterprise Pro for Government' as FedRAMP Authorized at the 20x Low impact level, status 'FedRAMP Certified' effective 'As of 2/1/2026'.”
Verify on trust.perplexity.ai“Self Assessments: CAIQ Lite (March 2026) ... VSA CORE (March 2026)”
> Show 1 unconfirmed / not-held certifications
source: trust.perplexity.aiThe vendor's pages state this for a different product or company, not for this product.
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
US-hosted (AWS / Amazon Bedrock, US subprocessors). No public self-serve EU data residency option found.
Consumer tiers (Free, Pro, Max) have 'AI Data Retention' ENABLED BY DEFAULT, meaning queries may be used to train/improve Perplexity's models unless the user opts out via Account Settings > Preferences (opt-out applies to future data only). Enterprise and Enterprise Pro/Max are the opposite: organization data is never used to train or fine-tune Perplexity's models, and contracts with third-party model providers prohibit them from training on customer data. So default training behavior depends entirely on the product tier.
// Security controls
Bug bounty / VDP
Private bug bounty on Bugcrowd plus a public Vulnerability Disclosure Program; AI-model issues (hallucination, jailbreak, prompt extraction) out of scope
bugcrowd.comEncryption
Data encryption utilized; encryption key access restricted; portable media encrypted (per Trust Center controls)
trust.perplexity.aiAccess control
Unique production database authentication enforced; unique account authentication enforced
trust.perplexity.aiResilience
Continuity and Disaster Recovery plans established and tested; cybersecurity insurance maintained
trust.perplexity.ai// Products & data scope
Data it handles: Queries collected; AI Data Retention ON by default (used for model training unless opted out)
Lowest privacy tier; opt-out available but default-on training.
Data it handles: Same default-on AI Data Retention as Free; user can disable training in settings
Paid does not automatically mean no-training; opt-out toggle still required.
Data it handles: Org data never used for AI training; uploaded files auto-deleted after 7 days; SSO/admin controls; DPA available
Strongest data protection tier; covered by SOC 2, HIPAA, DPA.
Data it handles: API request data governed by API/enterprise terms; per docs not used to train Perplexity models
Separate commercial terms from consumer app.
// What to watch
- Whether your data is used for AI training depends on your plan: consumer tiers (Free, Pro, Max) train on data by default, with an opt-out available, while Enterprise plans do not train on customer data.
- FedRAMP 20x Low is a finalized authorization: 'Perplexity Enterprise Pro for Government' is listed on the FedRAMP Marketplace (FR2604643715) as FedRAMP Authorized at the 20x Low impact level effective 2/1/2026. This authorization scope is the government enterprise offering, not the consumer app.
- No ISO 27001 listed (confirmed absent from Trust Center and corroborated by third-party trust trackers; no public ISO 27001 or ISO/IEC 42001).
- HIPAA is listed as a compliance framework but the only supporting artifact is a 'HIPAA Gap Assessment'; HIPAA-compliant use is scoped to Enterprise plans with an executed Business Associate Agreement (BAA), not consumer or API tiers.
// At a glance
Pricing model
Freemium subscription (Free, Pro, Max) plus Enterprise seats and usage-based API (Sonar)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Perplexity AI, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-06-27. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.perplexity.ai// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.