Is iHerb.com safe?
Review iHerb.com security risks.

The following security profile for iHerb.com includes the basics you’ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.

All Security Profiles

iHerb.com Organization Details

Headquarters

Hosting

Hosting locations

Security Program

Security Certifications

PCI Compliant

HIPAA Compliant

SOC 2 Compliant

GDPR Compliant

ISO 27001 Compliant

FedRamp Compliant

CSA Star Level 1
Compliant

Security Page

Security Portal

Bug Bounty

Vulnerability Disclosure

Terms of Service

https://www.iherb.com/info/terms-of-use

Privacy Policy

https://www.iherb.com/info/privacy

Status Page

Authentication

Authentication / SSO

Supported Okta Features

Supports SSO

Two-factor authentication via SMS

Two-factor authentication via E-mail

Two-factor authentication via Hardware

Two-factor authentication via Software

Two-factor authentication via TOTP

Two-factor authentication via U2F

OAuth Details

iHerb.com Supply Chain

Notified
SparkPost
Zendesk
Google Workspace
Amazon Web Services (AWS)
Proofpoint
DocuSign
Adobe
SOPHOS
HackerOne
Statuspage
Atlassian
Apple Business Manager
MongoDB
CloudHealth by VMware
Facebook
tinfoilsecurity.com
Google Tag Manager
Criteo
FullStory
Google Analytics

iHerb.com Subdomains

secure1.iherb.com
helpdesk.iherb.com
information.iherb.com
social.iherb.com
track.iherb.com
catalog.app.iherb.com
careers.iherb.com
txcontent.iherb.com
i.iherb.com
investors.iherb.com

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free