Framer — ow67ujg7iav0t6qtd1o6r2

·Framer

·Framer is a website builder that enables designers, startups, businesses, and agencies to create responsive websites without code.

·Compliance

·Resources

·Controls

·Updated 5 minutes ago

·Infrastructure security

• ·Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced

·Organizational security

• ·Asset disposal procedures utilized Portable media encrypted Anti-malware technology utilized

·Product security

• ·Data encryption utilized Control self-assessments conducted Penetration testing performed

·Internal security procedures

• ·Continuity and Disaster Recovery plans established
• ·Continuity and Disaster Recovery plans tested
• ·Configuration management system established

·Data and privacy

• ·Data retention procedures established Data classification policy established

·Data collected

·Subprocessors

·Updates

·Privacy

·Framer subprocessor changes

·Published July 8, 2026

·We've updated our subprocessor list with one addition:

• ·Name: Baseten Labs Inc.
• ·Purpose: supporting Framer's AI features Processing location(s): US, EEA

·The updated subprocessor list is available at Framer's Trust CenterOpens in new tab, on the 'Subprocessors' tab.

·If you have any questions or wish to raise an objection, please contact legal@framer.com. Privacy

·Framer subprocessor changes

·Published June 16, 2026

·We've moved our subprocessor list to the Framer Trust Center where it will be maintained going forward. The Trust Center reflects our current subprocessor list in full, including processors added since our previous publication on our website.

·From now on you will receive subprocessor notifications from this address.

·If you have any questions or wish to raise an objection, please contact legal@framer.com. Compliance

20252025 SOC 2 Type 2 Report

·Published February 3, 2026

·The Framer 2025 SOC 2 Type 2 report is now available for your review. The audit, completed by Schellman & Company, LLC, covers the period from December 1, 2024 to November 30, 2025, and includes the trust services criteria for Security and Availability.