Instacart Trust Center | Powered by SafeBase

Welcome to Instacart's Trust Center portal. The commitment to data privacy and security is paramount to our business. Use this portal to learn about our security posture as well as request access to documentation.

Featured Documents

LEGALData Processing Agreement

2

LEGALVendor Third Party Terms

REPORTSPentest Report

POLICIESInformation Security Program Charter

1

Data Access Level

2

Impact Level

2

Recovery Time Objective

1

Audit Logging

7

Data Security

7

Role-Based Access Control

5

HIPAA Report

2

Pentest Report

7

SOC 2 Report

6

SIG Lite

1

Access Monitoring

6

Data Backups

5

Data Erasure

2

Responsible Disclosure

1

Application Penetration Testing

4

Bot Detection

3

We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.

Anti-Bribery and Corruption

1

Code of Ethics

1

Effective Board Oversight

1

Cyber Insurance

5

Data Processing Agreement

4

Privacy Policy

3

Cookies

2

Data Breach Notifications

1

Data Privacy Officer

1

Data Access

5

Device Lock

1

Internal Single-Sign-On (SSO)

1

Amazon Web Services

3

Anti-DDoS

4

BC/DR

2

Anti-Malware

5

Disk Encryption

6

DNS Filtering

4

Bot Detection

2

Distributed Denial of Service Protection (Anti-DDoS)

2

Firewall

5

Asset Management Practices

4

Email Protection

6

Employee Training

5

Information Security Policy

1

Information Security Program Charter

1

Acceptable Use Policy

1

Qualys SSL Labs

2

SecurityScorecard

1

Designated Response Personnel

1

Incident Reporting Process

1

Forensic Retainer

1

Risk Assessments

1

Data Access/Impact Levels

1

Supply Chain Risk Management

1

We have strict asset management policies in place to ensure that all assets are accounted for and secure.

Business Continuity Plan (BCP)

1

Disaster Recovery Plan (DRP)

1

Failover/High Availability

1

Employee Privacy Training

1

Security Awareness Training

1

Training Records

1

Change Management Program

1

We have physical and environmental controls in place to ensure that our data centers are secure and reliable.

We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.

Instacart's Storefront Pro Subprocessor Update

Subprocessors

All selected products

As we continue to build and improve our platform, Storefront Pro will be leveraging GiveX as a Loyalty Program Provider to process data in service of the application. This serves as notification that GiveX will be added as a new Strorefront Pro subprocessor.

Foodstorm PCI-DSS Attestation of Compliance

Compliance

Foodstorm

The 2026 PCI Attestation of Compliance (AoC) for Foodstorm is now available on the trust center. Please visit the PCI Report section under the Foodstorm service dropdown to review or download.

Instacart's Information Security Program Charter

Compliance

All selected products

The Instacart Information Security Program Charter has replaced the Instacart Information Security Meta Policy. Additionally a table of contents has been added for validation of the security policy set.

Vendor Third Party Terms

Compliance

All selected products

Instacart's Third Party Data Terms have been updated to remove an outdated term for "Exhibit A" and replaced with reference to "Addendum."

Instacart's Response to the 2022 OpenSSL 3 Vulnerabilities

Incidents

All selected products

Instacart's response to OpenSSL can be viewed here by our Retailer Partners.