sproutsocial.com

C

69 of 100

Enterprise AI readiness, from public pages only

Scanned 2026-11-01 from 64 public pages. Methodology 1.0. Category: Marketing.

Identity		14 of 14
Assurance		21 of 25
Data and AI terms		15.5 of 26
Deployment		0 of 6
Agent readiness		6 of 11

Claim this page Compare

Identity

SAML or OIDC single sign-on (10 points) Found

Single Sign-on (SSO) via SAML 2.0 allows customers to provide their users with one set of login credentials to access multiple applications. source

Report a problem with this result

SCIM provisioning (6 points) Under review

Report a problem with this result

Roles and permissions (4 points) Found

The primary user roles include Reader, Contributor, Manager, and Admin. source

Report a problem with this result

Assurance

SOC 2 Type 2 (10 points) Found

SOC 2 Type 2 Report - Sprout Social source
SOC 2 Type II source

Report a problem with this result

ISO 27001 (4 points) Found

ISO 27001:2022 - Certificate of Registration source
The certificates were reissued on September 24, 2026, and expire on September 27, 2029. source

Report a problem with this result

Trust center (5 points) Found

Security Center source

Report a problem with this result

security.txt (2 points) Not found in public pages

Pages searched (1)

https://sproutsocial.com/.well-known/security.txt

Report a problem with this result

Public status page (2 points) Not found in public pages

Pages searched (4)

https://sproutsocial.com/
https://sproutsocial.com/docs
https://sproutsocial.com/status
https://sproutsocial.com/developers

Report a problem with this result

Bug bounty or disclosure program (2 points) Found

Responsible Disclosure Policy source
Has a bug bounty or vulnerability disclosure program source
This Responsible Disclosure Policy outlines steps for reporting vulnerabilities, what to expect, and what you can expect from us. source

Report a problem with this result

Data and AI terms

No training on customer data (8 points) Partly found

Sprout Social will not permit any AI Service Provider to access or use the AI Content for the purpose of training its AI models; provided, however, that Sprout Social may use the AI Content to train, develop, and improve the AI Features source

Report a problem with this result

Retention periods (5 points) Partly found

Sprout Social shall have the right to remove your Account information, Account settings, and Content within thirty (30) days of such expiration, cancellation, or termination with no liability or notice to you. source

Report a problem with this result

Subprocessor list (5 points) Found

OpenAI, L.L.C.* AI model provider source
*OpenAI, L.L.C. is a subprocessor for OpenAI powered AI features. These features can be disabled within the platform through your Settings. source

Report a problem with this result

Data processing agreement (4 points) Found

" DPA " means the Sprout Social Data Processing Addendum located at: https://media.sproutsocial.com/uploads/Downloadable-Customer-DPA.pdf . source
Data Processing Addendum . source
If your use of our Services includes processing personal data or personal information subject to applicable EU or US data protection laws, you must enter into the DPA. source

Report a problem with this result

Data residency (4 points) Not found in public pages

Pages searched (3)

https://sproutsocial.com/security/sprout-social-application/
https://sproutsocial.com/security/employee-advocacy/
https://sproutsocial.com/security/influencer-marketing/

Report a problem with this result

Deployment

Private deployment (6 points) Not found in public pages

Pages searched (2)

https://sproutsocial.com/security/sprout-social-application/
https://sproutsocial.com/security/employee-advocacy/

Report a problem with this result

Customer-managed keys (4 points) Under review

Report a problem with this result

Agent readiness

Public API reference (5 points) Found

Sprout Social Developer Terms source

Report a problem with this result

Official MCP server (6 points) Under review

Report a problem with this result

Controls on AI agent actions (4 points) Not found in public pages

Pages searched (16)

https://sproutsocial.com/security/
https://sproutsocial.com/ai/
https://sproutsocial.com/guardian/
https://sproutsocial.com/security/sprout-social-application/
https://sproutsocial.com/security/employee-advocacy/
https://sproutsocial.com/security/influencer-marketing/
https://sproutsocial.com/integrations/
https://sproutsocial.com/integrations/facebook/
https://sproutsocial.com/integrations/twitter/
https://sproutsocial.com/integrations/instagram/
https://sproutsocial.com/integrations/linkedin/
https://sproutsocial.com/integrations/threads/
https://sproutsocial.com/integrations/pinterest/
https://sproutsocial.com/ai/product-tour/
https://sproutsocial.com/integrations/tiktok/
https://sproutsocial.com/ai/features/ai-agent/

Report a problem with this result

Audit log export (2 points) Partly found

The Sprout application includes customer-facing audit trail logs that provide information on user activity within an account. source

Report a problem with this result

AI use policy (2 points) Under review

Report a problem with this result

Rate limits documented (not scored) Under review

Report a problem with this result

Changelog

2026-11-01: 83 to 69 (rescan) Controls on AI agent actions: Could not check to Not found in public pages; Official MCP server: Could not check to under review; Data residency: Could not check to Not found in public pages; Customer-managed keys: Could not check to under review; Private deployment: Could not check to Not found in public pages; SCIM provisioning: Could not check to under review
2026-11-01: First score, 83

Scores older than an hour can be refreshed.

sproutsocial.com: grade C, 69 of 100 | Enterprise AI readiness