Intapp DealCloud

Our controls align with SOC 2 Type 2 and ISAE 3000, with full audit traceability.Reviewed 2026-10-16View source

#### SOC 2 Type 2 and ISAE 3000 controlsReviewed 2026-10-16View source

The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers and data centers are securely managed.Reviewed 2026-10-16View source

ISO 27017 provides guidance on the information security aspects of cloud computing, recommending the implementation of cloud-specific information security controls that supplement the guidance of the ISO 27002 and ISO 27001 standards.Reviewed 2026-10-16View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

Intapp also lets end users log into these applications easier through single sign-on (SSO), simplifying the user experience.Reviewed 2026-10-16View source

### Single sign-on (SSO)Reviewed 2026-10-16View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Intapp provides granular, role-based access control, so administrators can define and manage both standard and custom roles and privileges.Reviewed 2026-10-16View source

### What role-based access control (RBAC) features does Intapp offer?Reviewed 2026-10-16View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

Define access policies once and enforce them in real time across every system, user, and agent — with audit trails to prove it.Reviewed 2026-10-16View source

Maintain an audit trail of user login activities, including a history of permissions, authorizations, and removals.Reviewed 2026-10-16View source

Before relying on it
Verify administrative and data-access events, retention and export.

To access DPA versions prior to v11, please contact contractsops@intapp.comReviewed 2026-10-16View source

Please view our customer data retention policy for more details.Reviewed 2026-10-16View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Monitoring controls — including system availability, change management, and incident response — are independently audited and verified annually.Reviewed 2026-10-16View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.