{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"bootloop","name":"BootLoop","domain":"bootloop.ai","category":"Design tools","one_liner":"Firmware in minutes, not months - rigorously tested on real hardware","trust_center_url":"https://trust.bootloop.ai/","security_page_url":null,"url":"https://certreports.com/vendors/bootloop/security","last_verified_at":"2026-09-30T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/bootloop/soc-2","evidence":[{"source_type":"trust_center","source_name":"BootLoop trust centre (Vanta)","url":"https://trust.bootloop.ai/","fetched_at":"2026-09-29 02:14:04.701665+00","content_hash":"9a8b05ddc8a6c358f56c2023eb8e1046cf3c0c5be523074343b4547d2917b5ee","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"BootLoop trust centre (Vanta)","url":"https://trust.bootloop.ai/","fetched_at":"2026-09-18 23:16:27.991089+00","content_hash":"2b29698c3cc5697678c25b18973f7369ca1d914616505e580ed7952009cd3454","wayback_url":null,"quote":"SOC 2","confidence":1}]}],"brief":{"summary":"BootLoop states on its trust centre that it holds a SOC 2 report, as of 30 Sep 2026. No period end or auditor details are provided alongside this SOC 2 statement, as of 30 Sep 2026. No public evidence found for PCI DSS for BootLoop as of 30 Sep 2026. No public evidence found for a HIPAA BAA for BootLoop as of 30 Sep 2026. No public evidence found for the EU-US Data Privacy Framework for BootLoop as of 30 Sep 2026.","bullets":["SOC 2: vendor states on its trust centre that it holds a SOC 2 report (as of 30 Sep 2026).","SOC 2: no auditor name or period end date disclosed (as of 30 Sep 2026).","PCI DSS / HIPAA / DPF: no public evidence found (as of 30 Sep 2026)."],"model":"claude-sonnet-5","generated_at":"2026-10-23 05:46:35.216211+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.bootloop.ai/","availability":"public","detail":"5 subprocessors listed on the trust centre","as_of":"2026-09-30"},{"kind":"privacy","url":"https://bootloop.ai/privacy","availability":"public","detail":null,"as_of":"2026-09-30"},{"kind":"ai_policy","url":"https://trust.bootloop.ai/","availability":"on_request","detail":"Listed on the trust centre as \"AIMS AI Policy\"","as_of":"2026-09-30"}],"documents":[{"type":"ai_policy","title":"AIMS AI Policy","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"business_continuity","title":"Business Continuity and Disaster Recover","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"incident_response","title":"Incident Response Plan","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"security_policy","title":"Access Control and Termination Policy","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"security_policy","title":"Human Resource Security Policy","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"security_policy","title":"Information Security Policy (AUP)","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"security_policy","title":"Network Security Policy","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"security_policy","title":"Operations Security Policy","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"security_policy","title":"Secure Development Policy","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"},{"type":"soc2_report","title":"SOC 2 Report","availability":"on_request","source_url":"https://trust.bootloop.ai/","last_seen":"2026-09-30"}],"statements":[],"security_profile":{"iso42001":null,"trains_on_customer_data":null,"data_residency_regions":[],"pen_test_cadence":null,"as_of":"2026-09-30"},"regulations_url":"https://certreports.com/api/v1/vendors/bootloop/regulations/{regulation}","subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud provider","location":null,"vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Anthropic","domain":"anthropic.com","purpose":"Data storage and processing","location":null,"vendor_url":"https://certreports.com/vendors/anthropic/security"},{"name":"Sentry","domain":null,"purpose":"Cloud monitoring","location":null,"vendor_url":null},{"name":"Supabase","domain":"supabase.com","purpose":"Cloud provider","location":null,"vendor_url":"https://certreports.com/vendors/supabase/security"},{"name":"WorkOS","domain":null,"purpose":"Engineering","location":null,"vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T11:57:01.221Z"}