{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"atomic","name":"Atomic","domain":"atomicvest.com","category":"AI tools","one_liner":"API that lets companies embed investment accounts into their services","trust_center_url":"https://trust.atomicvest.com/","security_page_url":null,"url":"https://certreports.com/vendors/atomic/security","last_verified_at":"2026-09-30T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/atomic/soc-2","evidence":[{"source_type":"trust_center","source_name":"Atomic trust centre (Vanta)","url":"https://trust.atomicvest.com/","fetched_at":"2026-09-29 02:06:31.927095+00","content_hash":"006b44f213e511fb2e9aa75a78d5721521c76ce19ee47fd09005515e645d2b77","wayback_url":null,"quote":"SOC 2 Type I","confidence":1},{"source_type":"trust_center","source_name":"Atomic trust centre (Vanta)","url":"https://trust.atomicvest.com/","fetched_at":"2026-09-18 23:12:56.522178+00","content_hash":"7b294084119c12d8b7d54ac0c35ccc23dced9271b0a25b80a588dce277054dd7","wayback_url":null,"quote":"SOC 2 Type I","confidence":1}]}],"brief":{"summary":"Atomic states on its trust centre that it holds a SOC 2 Type II report, according to evidence dated 18 Sep 2026. As of 18 Sep 2026, this SOC 2 status is recorded as a vendor statement rather than a verified registry entry, meaning the underlying audit report has not been independently confirmed by CertReports. No public evidence found for HIPAA as of 18 Sep 2026. No public evidence found for GDPR as of 18 Sep 2026. No public evidence found for the EU-US Data Privacy Framework as of 18 Sep 2026.","bullets":["SOC 2: vendor states on its trust centre it holds a SOC 2 Type II report (as of 18 Sep 2026); vendor-stated, not registry-verified","HIPAA: no public evidence found (as of 18 Sep 2026)","GDPR / EU-US Data Privacy Framework: no public evidence found (as of 18 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-21 11:02:38.771891+00"},"legal_docs":[{"kind":"privacy","url":"https://legal.atomicvest.com/usa.privacy.de3d0277-78f7-4741-9e9f-755f6b4f03ba.pdf","availability":"public","detail":null,"as_of":"2026-09-30"}],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/atomic/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T11:57:01.649Z"}