Trust Center
This Trust Center provides you with resources demonstrating Pied Piper's continuous commitment to protecting customer data. Below you'll find information about Pied Piper's trust practices including additional information related to security, privacy, AI, and general infrastructure documentation. We prioritize security in our product strategy and build our platform using best practices for highly available, scalable, and secure cloud applications. We regularly monitor and assess our program to ensure it meets or exceeds compliance and regulatory requirements.
Report a vulnerability at: security@piedpiper.com
Pied Piper's security and privacy programs are led by industry veterans with decades of experience:
Bertram Gilfoyle: Head of Security
Erlich Bachman: COO
Waystar Royco
Wayne Enterprises
SafeBase
Drata
- Are independent audit and assurance assessments performed according to risk-based plans and policies?
- Are independent audit and assurance assessments conducted according to relevant standards at least annually?
Trust Center Updates
As part of our commitment to ensuring the highest level of service availability and data protection, Pied Piper performs annual disaster recovery exercises.
On February 27th, 2026, Pied Piper conducted a disaster recovery exercise that simulated a scenario involving a regional AWS outage. This simulated a disruption to a primary data center, impacting the availability of Pied Piper systems and services. As a result in this tabletop exercise, Pied Piper initiated the cross-regional disaster recovery strategy and executed a comprehensive disaster recovery plan.
The report is available Here
A new Shai-Hulud-linked npm supply-chain campaign (“Sha1-Hulud”) is compromising major packages to exfiltrate development secrets and sensitive project files. The blast radius is large and the attack is accelerating, thanks to cross-victim exfiltration and a new preinstall-phase malware variant.
Our internal investigation has completed and Pied Piper has not identified any evidence indicating its own product or systems are affected.