ModelCharter

Is Intercom Fin safe for work?

Low risk · 14

Intercom · Customer support · facts (high-confidence)

Intercom Fin is low-risk for default at-work use (14/100): it trains on your data unless you opt out, and holds SOC 2 Type II.

Watch out: On the top Expert plan with Regional Data Hosting and a signed BAA, Fin holds SOC 2 Type II and ISO 27001, keeps third-party LLMs out of training, and offers EU residency. Lower plans train Intercom's own models on anonymized data unless you opt out.

Data and compliance facts

Trains on consumer-tier data
Opt-out
Trains on business-tier data
No
Training opt-out available
Yes
SOC 2 Type II
Yes
ISO 27001
Yes
ISO 42001 (AI management)
Unverified
GDPR Data Processing Addendum
Yes
HIPAA BAA
Yes
EU data residency
Yes
SSO / SAML
Yes
Data retention
No fixed window for active-workspace conversation and ticket data (persists for the life of the account); deleted within 30 days of termination on request.
Safer tier
Expert plan plus Regional Data Hosting addendum plus signed BAA (the config that gates HIPAA, SSO and auto-exclusion from AI training)

Why it scores 14 out of 100

  • +14Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.