{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"avoca","name":"Avoca","domain":"avoca.ai","category":"Sales tools","one_liner":"AI-powered Sales Agent for Service-Based Industries","trust_center_url":"https://trust.avoca.ai/","security_page_url":null,"url":"https://certreports.com/vendors/avoca/security","last_verified_at":"2026-09-30T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/avoca/soc-2","evidence":[{"source_type":"trust_center","source_name":"Avoca trust centre (Vanta)","url":"https://trust.avoca.ai/","fetched_at":"2026-09-29 02:13:30.041088+00","content_hash":"87079bdfdf2eec9b575df473a432d467417cfd5816ba31b35cda42efd7139c5b","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Avoca trust centre (Vanta)","url":"https://trust.avoca.ai/","fetched_at":"2026-09-18 23:16:16.063314+00","content_hash":"77bea35d9e345a19d960a8cbe422ed9d23b3c4877d6e1b04a63093b862b68bd6","wayback_url":null,"quote":"SOC 2","confidence":1}]}],"brief":{"summary":"Avoca states on its trust centre that it holds a SOC 2 report, as of 30 Sep 2026. No public evidence was found for ISO 27001 as of 30 Sep 2026. No public evidence was found for HIPAA, so no BAA offering is confirmed, as of 30 Sep 2026. No public evidence was found for the EU-US Data Privacy Framework as of 30 Sep 2026. Taken together, Avoca's compliance posture as of 30 Sep 2026 rests on a vendor-asserted SOC 2 claim with no corroborating registry or additional framework evidence.","bullets":["SOC 2: vendor states it holds a SOC 2 report on its trust centre, as of 30 Sep 2026","ISO 27001: no public evidence found, as of 30 Sep 2026","HIPAA: no public evidence found, as of 30 Sep 2026"],"model":"claude-sonnet-5","generated_at":"2026-10-18 05:33:11.695339+00"},"legal_docs":[],"documents":[{"type":"soc2_report","title":"Avoca - SOC 2 Type I - 2025.pdf","availability":"on_request","source_url":"https://trust.avoca.ai/","last_seen":"2026-09-30"},{"type":"soc2_report","title":"Avoca - SOC 2 Type II - 2026.pdf","availability":"on_request","source_url":"https://trust.avoca.ai/","last_seen":"2026-09-30"}],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/avoca/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T18:56:09.450Z"}