Source
Security / trust page — found from the homepage — HighLevel
Checked for HighLevel on 3 Nov 2026
- Page
- https://www.gohighlevel.com/privacy-and-security
- Checked
- 3 Nov 2026, 15:06 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:deabd9b3c5d0af1f3304c6610d85809a54c18bb3588eeac0c61ea099d803b414
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
SOC 2 type ii Report an error
“HighLevel undergoes annual SOC 2 Type II assessments. This attestation verifies that our internal controls for security, availability, and confidentiality meet the rigorous standards established by the AICPA.”
-
EU US dpf Report an error
“We maintain certification under the EU-U.S. Data Privacy Framework. This ensures lawful transfer mechanisms and regulatory compliance for personal data moving between the European Union and the United States.”
-
GDPR CCPA Report an error
“HighLevel complies with global privacy laws, including the GDPR, U.S. state privacy laws like the CCPA, and CAN-SPAM. We also give you the tools to do the same: manage user consent, fulfill data access and deletion requests”
-
HIPAA baa Report an error
“Securely manage Protected Health Information (PHI) with enterprise-grade encryption. We support Business Associate Agreements (BAAs) to ensure your agency meets all regulatory standards for healthcare clients.”
-
Provider Report an error
“Hosted on Google Cloud Platform (GCP)”
-
Encryption Report an error
“Encryption: TLS 1.2+ (in transit) and AES-256 (at rest)”
-
Ddos waf Report an error
“DDoS mitigation & Web Application Firewall (WAF)”
-
Two factor auth Report an error
“Two-Factor Authentication (2FA) enforcement”
-
Permissions audit logs Report an error
“Granular User Permissions & Audit Logs”
-
SSO Report an error
“Single Sign-On (SSO)”
-
Background checks Report an error
“Mandatory employee background checks”
-
Vendor risk management Report an error
“Vendor Risk Management (VRM) protocols”
-
Penetration testing Report an error
“Regular third-party Penetration Testing”
-
Vulnerability scanning Report an error
“Automated vulnerability scanning”
-
Sig lite Report an error
“SIG Lite request”
-
System status Report an error
“All Systems Operational”
-
Address Report an error
“Corporate HQ 1801 N. Lamar St. Suite 600 Dallas, Texas 75202”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Data Protection Officer European sovereignty
- The Migrator European sovereignty
- The RevOps Integrator Contact & data model
- The RevOps Integrator European sovereignty
- The Sales Ops Lead Contact & data model
- The Sales Ops Lead European sovereignty
- The Skeptic European sovereignty
- The Solo Seller European sovereignty