Skip to content
SourceTier

HIPAA compliance stated: Medallia

Every version of this statement in our record, newest first, each with the state it was recorded with and the source it was read from.

Current value

Yes

Verified
www.medallia.com/security (Primary documentation), retrieved on 2 days: 2026-09-02, 2026-10-03

Observed 2026-09-02, last confirmed 2026-10-03, recorded in our database 2026-09-02.

Statement id st_26b7c989a0ef17483df9 JSON Change feed Atom feed On the product page Record as of a date

This id stays the same when a new value supersedes the old one, when we withdraw the statement and when two duplicate entries are merged. Each version below keeps the state it was recorded with; today's confidence for the current value is on the product page. Not yet verified describes our research, never the product.

Versions

2 in our record since 2026-09-02
  1. Recorded 2026-09-02

    Yes

    Verified
    www.medallia.com/security (Primary documentation), retrieved on 2 days: 2026-09-02, 2026-10-03
    ...us industry standards. We possess SOC 2 Type II platform compliance, GDPR/SCCs, CCPA, and HIPAA in addition to HITRUST, ISO 27001, 27017, 27018, and 27701. We are also certified for CBP...

    Current version.

  2. Recorded 2026-09-02

    Not yet verified

    Not yet verified
    www.medallia.com (Primary documentation), retrieved 2026-09-02

    Superseded 2026-09-02 by the next version.

Changes attached to this statement

2
  • 2026-09-02 · First documented

    Medallia: HIPAA compliance stated documented (verified). This is a finding of ours, not necessarily a new certification.

  • 2026-09-02 · Research update

    Medallia: HIPAA compliance stated is now recorded as not measured.