Statsig’s trust page added an “AI Security and Compliance Controls” link and removed several SOC 2 document listings, including Statsig’s bridge letter and confirmation letter. Customers reviewing compliance evidence will see a different document selection; the subprocessor summary now names Microsoft and Google instead of Datadog and Fivetran, which remain listed elsewhere on the page.
Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.
What changed
Struck in red is what Statsig removed; blue is what they added. Muted text is unchanged context.
BeforeAfter
Added#1
Before: …and Compliance Open link Audit Logging Open link nothing here Open link Subprocessors See all 9 subprocessors amazonwebservices.com…
After: …and Compliance Open link Audit Logging Open link AI Security and Compliance Controls Open link Subprocessors See all 9 subprocessors amazonwebservices.com…
Changed#2
Before: …its subprocessors in this trust center, including amazonwebservices.com, Datadog, and Fivetran. See the subprocessors section for the complete list.…
After: …its subprocessors in this trust center, including amazonwebservices.com, Microsoft, and Google. See the subprocessors section for the complete list.…
Added#3
Before: …and Compliance Open link Audit Logging Open link nothing here SOC 2 Type II Report - 2026-2027 Request…
After: …and Compliance Open link Audit Logging Open link AI Security and Compliance Controls Open link Statsig SOC 2 Type II Report - 2026-2027 Request…
Removed#4
Before: …2 Type II Report - 2026-2027 Request access Statsig - SOC 2 Bridge Letter Request access SOC 1 Type 2 Report -…
After: …2 Type II Report - 2026-2027 Request access removed Request access SOC 1 Type 2 Report -…
Removed#5
Before: …Report - Valid through October 2026 Request access Statsig - SOC 2 Type II Report Request access Statsig - SOC 2 Type II Confirmation Letter Request access Amplitude SOC 2 Type II Bridge Letter (2026) Request access Smith+Howard PC - SOC 2 Engagement…
After: …Report - Valid through October 2026 Request access removed Request access Smith+Howard PC - SOC 2 Engagement…
Added#6
Before: …access Amplitude ISO/IEC 27001 Certificate (2026–2027) Request access nothing here SOC 2 Type II Report - 2026-2027 Request…
After: …access Amplitude ISO/IEC 27001 Certificate (2026–2027) Request access Statsig SOC 2 Type II Report - 2026-2027 Request…
Added#7
Before: …Amplitude's MCP - Security and Compliance Open link nothing here Open link Policies Disaster Recovery and Business Continuity…
After: …Amplitude's MCP - Security and Compliance Open link AI Security and Compliance Controls Open link Policies Disaster Recovery and Business Continuity…
Added#8
Before: …Provider for the Statsig-branded Amplitude Services. United States nothing here Google · United States, EU Generative AI technology,…
After: …Provider for the Statsig-branded Amplitude Services. United States LLM Provider Google · United States, EU Generative AI technology,…
Added#9
Before: …to enhance Amplitude’s AI features. United States, EU nothing here Snowflake · United States, Germany (for AI Feedback…
After: …to enhance Amplitude’s AI features. United States, EU Datawarehouse Snowflake · United States, Germany (for AI Feedback…
Added#10
Before: …Feedback). United States, Germany (for AI Feedback only) nothing here Datadog · United States Logging and operational monitoring.…
After: …Feedback). United States, Germany (for AI Feedback only) Security/Logging Datadog · United States Logging and operational monitoring.…
Added#11
Before: …Security vulnerability management and detection. United States, Germany nothing here Fivetran · United States, Germany Cloud-based data movement…
After: …Security vulnerability management and detection. United States, Germany Other Fivetran · United States, Germany Cloud-based data movement…
Compared with the previous archived version (#11225 to #12005). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
The trust page replaced Wolfia’s security-questionnaire automation pitch with an invitation to get a Wolfia trust center. This is marketing wording only; no customer-facing plans, features, prices or security controls are shown as changed.
Saturday, October 31
1 page change
Content changed
Page change
Trust pagechangedthis change
Statsig’s trust page added an “AI Security and Compliance Controls” link and removed several SOC 2 document listings, including Statsig’s bridge letter and confirmation letter. Customers reviewing compliance evidence will see a different document selection; the subprocessor summary now names Microsoft and Google instead of Datadog and Fivetran, which remain listed elsewhere on the page.
Statsig’s tracked trust page added a “Security and Compliance Program Overview,” described as a summary of policies supporting SOC 2 and ISO compliance frameworks. It is listed with “Request access,” giving customers another compliance resource to request.
Cite this
Trust page changed on Statsig’s Trust page, changed 2026-10-31 08:44 UTC (change 2 of 4).