# Intapp DealCloud

Relationship intelligence CRM

Research: https://www.safecli.org/company/intapp.com
Company: https://intapp.com

## Evidence status

Procurement review needed
Source review: 2026-10-16T03:23:39.281Z
API: API mentioned

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Mixed claims — review

> Our controls align with SOC 2 Type 2 and ISAE 3000, with full audit traceability.

Source: https://www.intapp.com/cloud/monitoring/
Reviewed: 2026-10-16T03:23:39.281Z

> #### SOC 2 Type 2 and ISAE 3000 controls

Source: https://www.intapp.com/cloud/monitoring/
Reviewed: 2026-10-16T03:23:39.281Z

> The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers and data centers are securely managed.

Source: https://www.intapp.com/cloud/compliance/
Reviewed: 2026-10-16T03:23:39.281Z

> ISO 27017 provides guidance on the information security aspects of cloud computing, recommending the implementation of cloud-specific information security controls that supplement the guidance of the ISO 27002 and ISO 27001 standards.

Source: https://www.intapp.com/cloud/compliance/
Reviewed: 2026-10-16T03:23:39.281Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Company-published

> Intapp also lets end users log into these applications easier through single sign-on (SSO), simplifying the user experience.

Source: https://www.intapp.com/cloud/security/stewardship/iam/
Reviewed: 2026-10-16T03:23:39.281Z

> ### Single sign-on (SSO)

Source: https://www.intapp.com/cloud/security/stewardship/iam/
Reviewed: 2026-10-16T03:23:39.281Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Mixed claims — review

> Intapp provides granular, role-based access control, so administrators can define and manage both standard and custom roles and privileges.

Source: https://www.intapp.com/cloud/security/stewardship/iam/
Reviewed: 2026-10-16T03:23:39.281Z

> ### What role-based access control (RBAC) features does Intapp offer?

Source: https://www.intapp.com/cloud/security/stewardship/iam/
Reviewed: 2026-10-16T03:23:39.281Z

- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Company-published

> Define access policies once and enforce them in real time across every system, user, and agent — with audit trails to prove it.

Source: https://intapp.com/
Reviewed: 2026-10-16T03:23:39.281Z

> Maintain an audit trail of user login activities, including a history of permissions, authorizations, and removals.

Source: https://www.intapp.com/cloud/security/stewardship/iam/
Reviewed: 2026-10-16T03:23:39.281Z

- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Company-published

> To access DPA versions prior to v11, please contact contractsops@intapp.com

Source: https://www.intapp.com/dpa/
Reviewed: 2026-10-16T03:23:39.281Z

> Please view our customer data retention policy for more details.

Source: https://www.intapp.com/cloud/security/
Reviewed: 2026-10-16T03:23:39.281Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Company-published

> Monitoring controls — including system availability, change management, and incident response — are independently audited and verified annually.

Source: https://www.intapp.com/cloud/monitoring/
Reviewed: 2026-10-16T03:23:39.281Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Not found


- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: