Is Freshworks safe for
your vendor program?
- FedRAMP Status
- Freshworks is not listed on the FedRAMP Marketplace as of March 2026.
- SOC 2 Status
- Freshworks has a SOC 2 claim detected on their trust page. Claim is vendor-attested — no public registry exists for independent verification.
- Sanctions Screening
- Freshworks returned no matches in OFAC SDN, EU Consolidated, and UN sanctions screening.
- Risk Tier
- ThirdProof assigned Freshworks a Low Risk tier with 94% confidence across 24 intelligence sources.
ThirdProof investigated Freshworks (freshworks.com) across 24 intelligence sources including sanctions databases, cyber risk scores, business registries, and more.
Verified against FedRAMP Marketplace API as of March 2026
Organizations with federal compliance requirements should verify this directly at marketplace.fedramp.gov.
Freshworks is not listed on the FedRAMP Marketplace.
Investigation Preview — 23 Sources Queried
Full investigation report with evidence chain, compliance assessment, and recommended actions.
Investigate Freshworks — First Investigation Free →Executive Summary Preview
Freshworks (freshworks.com) presents a low overall risk posture, consistent with its Tier 4 designation and 94% confidence score. The company is a publicly traded, legally registered entity (FRESHWORKS INC., LEI: 254900ULRGCUEIK0K191) incorporated in Delaware, with no sanctions matches, no adverse media signals, and a clean domain reputation across 94 security engines.
This is an excerpt from the full ThirdProof investigation report. Get the complete report →
Key Findings for Freshworks
| Severity | Finding | Source |
|---|---|---|
| info | Clean domain reputation | Threat Intelligence |
| low | 7 certifications claimed but not independently verified | Trust & Compliance Page Scan |
2 total findings in the full report. View all findings →
Recommended Actions
- Obtain Freshworks's current PCI DSS v4.0.0 Attestation of Compliance (AoC): contact Freshworks via trust.freshworks.com or email their compliance team directly. The AoC must be issued by a QSA and should specify the systems, services, and data flows in scope. File this with your TPSP list to satisfy PCI-DSS 4.0 Requirement 12.8.2.
- Request the most recent SOC 2 Type 2 audit report: ask the Freshworks security team for a copy, or check trust.freshworks.com where many SaaS vendors publish reports under NDA. Review the audit period (confirm it covers the last 12 months), the scope of services, and whether any control exceptions were noted.
- Execute a formal Data Processing Agreement (DPA) with Freshworks before processing EU consumer data, and ensure a CCPA Service Provider Addendum (or equivalent) is in place prohibiting Freshworks from selling or cross-context behavioral advertising using your customer data. Both agreements should be documented and retained.
Full recommendations available in the complete report.
“We manage nearly 100 vendors touching customer payment data. ThirdProof gives me audit-ready evidence in the time it used to take just to send the questionnaire.”
— April, Co-owner, The Perky Lady
What you'll see in Freshworks's report
Every ThirdProof report includes these sections
Deterministic score based on evidence — not AI opinion
Understand how complete the picture is — higher confidence means more data sources returned results
Each finding linked to its source with severity rating
Know exactly what to do next — plain-language guidance for your compliance team
Independently verified, vendor attested, or not found
Audit-ready report with methodology disclosure
ThirdProof uses a deterministic rules engine to assign risk tiers. AI writes the narrative — rules drive the decision.
Intelligence Sources Queried for Freshworks
Get Freshworks's complete risk report — risk tier, confidence score, individual findings, and AI synthesis — in under 2 minutes.
Get Freshworks's Risk Report Free →No credit card required
What a ThirdProof investigation covers
Sanctions Screening
Is Freshworks on any OFAC, EU, or UN sanctions list? Are any officers or affiliates flagged?
Cyber Risk Assessment
What is Freshworks's security posture? Threat intelligence scanning, known vulnerabilities, and security header analysis.
Business Registration
Is Freshworks a legitimately registered business entity? Corporate status, jurisdiction, and officer verification.
Adverse Media Analysis
Has Freshworks appeared in negative news coverage? Data breaches, lawsuits, regulatory actions, and complaints.
Domain & Infrastructure
Is Freshworks's website secure? TLS configuration, DNS hygiene, security headers, and domain age analysis.
Company Intelligence
What are Freshworks's firmographics? Employee count, industry classification, technology stack, and corporate structure.
Trust & Compliance Verification
Does Freshworks claim SOC 2, ISO 27001, HITRUST, or FedRAMP? ThirdProof scans trust pages for certification claims and cross-references the FedRAMP public registry for independent verification.
Supply Chain & Subprocessor Discovery
Who does Freshworks depend on? ThirdProof discovers subprocessors from vendor-published pages and runs sanctions screening and safe browsing checks against each one.
Regulatory & Financial Filings
Has Freshworks appeared in SEC enforcement filings? Is it associated with any FDIC bank failures? ThirdProof searches regulatory databases with entity verification to confirm attribution.
Frequently asked about Freshworks
Is Freshworks safe to use as a vendor?+
Does Freshworks have SOC 2 certification?+
Is Freshworks FedRAMP authorized?+
Has Freshworks had any data breaches?+
Is Freshworks on any sanctions lists?+
How do I assess Freshworks for vendor risk?+
Also investigated by ThirdProof
Get the full report on Freshworks
Your first vendor investigation is completely free. Results in under 2 minutes.
Get Freshworks's Risk Report Free →No credit card required
After your free investigation, plans start at $399/mo for up to 25 investigations.
Want a walkthrough of ThirdProof for your team?
▶Request a Personalized Demo