Instacart Trust Center | Powered by SafeBase

Welcome to Instacart's Trust Center portal. The commitment to data privacy and security is paramount to our business. Use this portal to learn about our security posture as well as request access to documentation.

PCI DSS

SOC 2

HIPAA

MRC Accredited

Featured Documents

LEGALData Processing Agreement

2

LEGALVendor Third Party Terms

REPORTSPentest Report

POLICIESInformation Security Program Charter

1

Data Access Level

2

Impact Level

2

Recovery Time Objective

1

Audit Logging

7

Data Security

7

Role-Based Access Control

5

HIPAA Report

2

Pentest Report

6

SOC 2 Report

5

We are working on our security compliance. We can provide completed questionnaires upon request.

Access Monitoring

6

Data Backups

5

Data Erasure

2

Responsible Disclosure

1

Application Penetration Testing

4

Bot Detection

3

We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.

Anti-Bribery and Corruption

1

Code of Ethics

1

Effective Board Oversight

1

Cyber Insurance

5

Data Processing Agreement

4

Privacy Policy

3

Cookies

2

Data Breach Notifications

1

Data Privacy Officer

1

Data Access

5

Device Lock

1

Internal Single-Sign-On (SSO)

1

Amazon Web Services

3

Anti-DDoS

4

BC/DR

2

Anti-Malware

5

Disk Encryption

6

DNS Filtering

4

Bot Detection

2

Distributed Denial of Service Protection (Anti-DDoS)

2

Firewall

5

Asset Management Practices

4

Email Protection

6

Employee Training

5

Information Security Policy

1

Information Security Program Charter

1

Acceptable Use Policy

1

Qualys SSL Labs

2

SecurityScorecard

1

Designated Response Personnel

1

Incident Reporting Process

1

Forensic Retainer

1

Risk Assessments

1

Data Access/Impact Levels

1

Supply Chain Risk Management

1

Business Continuity Plan (BCP)

1

Disaster Recovery Plan (DRP)

1

Failover/High Availability

1

Employee Privacy Training

1

Security Awareness Training

1

Training Records

1

Change Management Program

1

Instacart's Storefront Pro Subprocessor Update

Copy link

Subprocessors

All selected products

As we continue to build and improve our platform, Storefront Pro will be leveraging GiveX as a Loyalty Program Provider to process data in service of the application. This serves as notification that GiveX will be added as a new Strorefront Pro subprocessor.

Instacart's Annual Penetration Test

Copy link

General

All selected products

The 2024 Instacart annual penetration test executive summary is available for download.

Instacart's Information Security Program Charter

Copy link

Compliance

All selected products

The Instacart Information Security Program Charter has replaced the Instacart Information Security Meta Policy. Additionally a table of contents has been added for validation of the security policy set.

Vendor Third Party Terms

Copy link

Compliance

All selected products

Instacart's Third Party Data Terms have been updated to remove an outdated term for "Exhibit A" and replaced with reference to "Addendum."

Instacart's Response to the 2022 OpenSSL 3 Vulnerabilities

Copy link

Incidents

All selected products

Instacart's response to OpenSSL can be viewed here by our Retailer Partners.