Affinity

Relationship intelligence CRM

affinity.co

Enterprise evidence

Insufficient enterprise evidence

Public information covers data handling, reliability & support. Still unresolved: security assurance, sso & provisioning, access controls.

3 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-16

2 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceMixed claims — review
- SOC 2 Type 2Reviewed 2026-10-16View source
COMPLIANCE SOC 2 Type 2Reviewed 2026-10-16View source
- SOC 2 ReportReviewed 2026-10-16View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningNot found

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityNot found

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published
- SubprocessorsReviewed 2026-10-16View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published
## Incident ResponseReviewed 2026-10-16View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Automatically captures interaction data from email and calendar to map network relationships.

Worth asking

How does the platform ensure data privacy while mapping relationships across various third-party email and calendar providers?

Sources

Evidence details

Enterprise controls

- ISO/IEC 27001 - ISO/IEC 27017:2015 - ISO/IEC 27018:2019 - SOC 2 - EU-US DPF - ISO/IEC 27701 - SOC 2 Type 2 - SOC 3 COMPLIANCE SOC 2 Type 2

Developer access

- Privacy Policy (Updated 10/24/2023) - Affinity Developer Agreement (Updated 09/18/2025) - API Endpoints/Data Fields Summary (Updated 09/18/2025)

Last checked Oct 16, 2026

Company-published evidence, not an independent audit. Unknown means unverified.