Pistachio Trust Center
PistachioTrust Center

Trust Center

Policies

How we protect your data, use AI responsibly and run our business. Select a policy to read it in full.

Security & Resilience

Our Approach to Security

You trust us with your people’s data. Here’s how we protect it, and why we do it this way.

Security & Resilience

Information Security Policy

You rely on us to keep your data safe. Here’s how our certified security management system works, and who is accountable for it.

Security & Resilience

Access Control Policy

Access to your data is limited to the people who need it, and only for as long as they need it.

Privacy & Data Protection

Data Management Policy

How we classify, protect, store and delete data.

AI Governance

AI Policy

AI helps us manage your human cyber risk without getting in the way. Here’s how we keep it responsible, fair and private in every product we build.

Governance & Ethics

Code of Conduct

Great work starts with how we treat each other. This Code describes how we work at Pistachio, with colleagues, customers and partners alike.

Governance & Ethics

ESG Policy

Doing the right thing matters to us. Here’s how we look after people, the planet and the way we do business.

Governance & Ethics

Supplier Code of Conduct

We’re only as trustworthy as the companies we work with. Here’s what we expect from every supplier.

Sub-processors

The sub-processors we use, and where they process data, are listed in Appendix A of our Data Processing Agreement.

Certification and further documentation

Pistachio is certified to ISO/IEC 27001. Our information security management system includes further policies covering areas such as cryptography, operations, secure development, incident response and business continuity. For security questions or documentation, contact security@pistachioapp.com.