Source
Security page — ClickUp
Checked for ClickUp on 15 Sep 2026
- Page
- https://clickup.com/security
- Checked
- 15 Sep 2026, 14:55 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:6f106797ca81181e45cf90db6558dcfd9229d189176799eb43314d15e95abc2b
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Provider Report an error
“ClickUp is hosted entirely on Amazon Web Services (AWS), providing end-to-end security and privacy features built in.”
-
Data center security Report an error
“ClickUp customer data is hosted by Amazon Web Services (AWS), which is certified SOC 2 Type 2.”
-
SOC certifications Report an error
“Our continued SOC 1 Type 2, SOC 2 Type 2, and SOC 3 certifications ensures our organizational and technology controls are independently audited at least annually.”
-
SOC reports contact Report an error
“Please contact sales@clickup.com for ClickUp's latest reports.”
-
ISO certifications Report an error
“Following an extensive audit process the ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, and ISO 27701:2019 certifications confirm that ClickUp meets the highest international standards for security, privacy, reliability, quality, and trust.”
-
ISO certificates contact Report an error
“Please contact sales@clickup.com for ClickUp's ISO certificates.”
-
ISO 42001 Report an error
“ClickUp is proud to be among the first platforms to achieve ISO 42001 certification, the new global standard for Artificial Intelligence Management Systems.”
-
Data residency Report an error
“ClickUp customers who are on the Enterprise Plan have the option to host their core Workspace data in ClickUp’s US, European, or Asia Pacific data centers at no additional cost.”
-
Data center locations Report an error
“ClickUp supports Data Residency through our Amazon Web Services-operated data centers in Ireland (Europe Region), Australia (Asia Pacific Region), Singapore (Asia Pacific Region), and the United States.”
-
Encryption in transit Report an error
“All ClickUp web application communications are encrypted over TLS 1.2, which cannot be viewed by a third party and is the same level of encryption used by banks and financial institutions.”
-
Encryption at rest Report an error
“All data for ClickUp is encrypted at rest using AES-256 encryption.”
-
Pci Report an error
“ClickUp maintains ongoing PCI compliance, abiding by stringent industry standards for storing, processing and transmitting credit card information online.”
-
Security monitoring Report an error
“ClickUp actively monitors ongoing security, performance and availability 24/7/365. We run automated security testing on an ongoing basis. We also contract a third party for penetration testing.”
-
Two factor authentication Report an error
“Two-factor Authentication”
-
Google SSO Report an error
“Google SSO BUSINESS”
-
AI no training Report an error
“ClickUp's AI partners are prohibited from using your data for training their models.”
-
AI retention Report an error
“This means zero third-party data retention.”
-
AI no retention storage Report an error
“We don't allow third-party AI providers to store any of your data.”
-
AI permissions Report an error
“AI Agents respect user permissions and can only see or act on what they have been given access to.”
-
GDPR Report an error
“GDPR COMPLIANT”
-
HIPAA Report an error
“HIPAA COMPLIANT”
Scores citing this record
- The Bootstrapper Pricing transparency
- The Bootstrapper Collaboration depth
- The Bootstrapper European sovereignty
- The Bootstrapper Pricing transparency
- The Bootstrapper Collaboration depth
- The Bootstrapper European sovereignty
- The Bootstrapper Collaboration depth
- The Bootstrapper European sovereignty
- The Data Protection Officer Pricing transparency
- The Data Protection Officer Collaboration depth
- The Data Protection Officer European sovereignty
- The Data Protection Officer Pricing transparency
- The Data Protection Officer Collaboration depth
- The Data Protection Officer Onboarding effort
- The Data Protection Officer European sovereignty
- The Data Protection Officer Support & documentation
- The Data Protection Officer Pricing transparency
- The Data Protection Officer European sovereignty
- The Enterprise Architect Collaboration depth
- The Enterprise Architect European sovereignty
- The Enterprise Architect Collaboration depth
- The Enterprise Architect European sovereignty
- The Enterprise Architect Support & documentation
- The Enterprise Architect Collaboration depth
- The Enterprise Architect European sovereignty
- The Integrator Collaboration depth
- The Integrator European sovereignty
- The Integrator Pricing transparency
- The Integrator Collaboration depth
- The Integrator European sovereignty
- The Integrator European sovereignty
- The Integrator Support & documentation
- The Skeptic Pricing transparency
- The Skeptic Collaboration depth
- The Skeptic European sovereignty
- The Skeptic Support & documentation
- The Skeptic Collaboration depth
- The Skeptic European sovereignty
- The Skeptic European sovereignty
- The Skeptic Support & documentation
- The UX Purist Pricing transparency
- The UX Purist Collaboration depth
- The UX Purist European sovereignty
- The UX Purist Pricing transparency
- The UX Purist Collaboration depth
- The UX Purist European sovereignty
- The UX Purist Collaboration depth
- The UX Purist European sovereignty