{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"fireworks-ai","name":"Fireworks AI","domain":"fireworks.ai","category":"AI infrastructure","one_liner":"Fireworks’ state of the art training and inference platform take you beyond the frontier, transforming open models into your specialized","trust_center_url":"https://trust.fireworks.ai/","security_page_url":null,"url":"https://certreports.com/vendors/fireworks-ai/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/fireworks-ai/hipaa","evidence":[{"source_type":"trust_center","source_name":"Fireworks AI trust centre (Vanta)","url":"https://trust.fireworks.ai/","fetched_at":"2026-09-19 07:32:26.100315+00","content_hash":"da82cf979e4db2b01726aec1465edf06e17838f23a681b1c371e046f33de9f96","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 19 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/fireworks-ai/soc-2","evidence":[{"source_type":"trust_center","source_name":"Fireworks AI trust centre (Vanta)","url":"https://trust.fireworks.ai/","fetched_at":"2026-09-19 07:32:26.100315+00","content_hash":"da82cf979e4db2b01726aec1465edf06e17838f23a681b1c371e046f33de9f96","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/fireworks-ai/gdpr","evidence":[{"source_type":"trust_center","source_name":"Fireworks AI trust centre (Vanta)","url":"https://trust.fireworks.ai/","fetched_at":"2026-09-19 07:32:26.100315+00","content_hash":"da82cf979e4db2b01726aec1465edf06e17838f23a681b1c371e046f33de9f96","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/fireworks-ai/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Fireworks AI trust centre (Vanta)","url":"https://trust.fireworks.ai/","fetched_at":"2026-09-19 07:32:26.100315+00","content_hash":"da82cf979e4db2b01726aec1465edf06e17838f23a681b1c371e046f33de9f96","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"iso-27701","framework_name":"ISO/IEC 27701","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27701 certificate on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27701 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/fireworks-ai/iso-27701","evidence":[{"source_type":"trust_center","source_name":"Fireworks AI trust centre (Vanta)","url":"https://trust.fireworks.ai/","fetched_at":"2026-09-19 07:32:26.100315+00","content_hash":"da82cf979e4db2b01726aec1465edf06e17838f23a681b1c371e046f33de9f96","wayback_url":null,"quote":"ISO 27701","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Vanta) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 42001:2023 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/fireworks-ai/iso-42001","evidence":[{"source_type":"trust_center","source_name":"Fireworks AI trust centre (Vanta)","url":"https://trust.fireworks.ai/","fetched_at":"2026-09-19 07:32:26.100315+00","content_hash":"da82cf979e4db2b01726aec1465edf06e17838f23a681b1c371e046f33de9f96","wayback_url":null,"quote":"ISO/IEC 42001:2023","confidence":1}]}],"brief":{"summary":"Fireworks AI's trust centre states, as of 19 Sep 2026, that the company displays a HIPAA badge, though the evidence on file does not confirm whether a BAA is offered. According to Fireworks AI's trust centre, as of 19 Sep 2026, the company has a SOC 2 Type II report on file. Fireworks AI's trust centre also states, as of 19 Sep 2026, that the company meets GDPR requirements. As of 19 Sep 2026, Fireworks AI states on its trust centre that it holds ISO/IEC 27001:2022 and ISO/IEC 27701. Fireworks AI's trust centre further states, as of 19 Sep 2026, that the company holds ISO/IEC 42001:2023.","bullets":["HIPAA: vendor displays a badge on trust centre; BAA availability not confirmed, as of 19 Sep 2026","SOC 2 Type II report: vendor states on trust centre, as of 19 Sep 2026","ISO/IEC 27001:2022, ISO/IEC 27701, ISO/IEC 42001:2023, GDPR: all vendor-stated on trust centre, as of 19 Sep 2026"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 10:38:09.8965+00"},"legal_docs":[{"kind":"privacy","url":"https://www.fireworks.ai/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-19"},{"kind":"subprocessors","url":"https://trust.fireworks.ai/","availability":"public","detail":"19 subprocessors listed on the trust centre","as_of":"2026-09-19"}],"subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud infrastructure and service provider","location":"United States, Japan, Singapore, Australia, Germany, United Kingdom","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"CloudFlare","domain":"cloudflare.com","purpose":"Content delivery network provider","location":"Processing is performed at the data center ⁠that is closest to the End User","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"CoreWeave","domain":"coreweave.com","purpose":"Infrastructure Provider","location":"United States","vendor_url":null},{"name":"Crusoe","domain":"crusoe.ai","purpose":"Infrastructure provider","location":"United States, Iceland","vendor_url":null},{"name":"DigitalOcean","domain":"digitalocean.com","purpose":"Infrastructure Provider","location":"United States","vendor_url":"https://certreports.com/vendors/digitalocean/security"},{"name":"Discord Inc.","domain":"discord.com","purpose":"Communication services","location":"United States","vendor_url":"https://certreports.com/vendors/discord/security"},{"name":"Era4","domain":"era4.com","purpose":"Infrastructure provider","location":"United Kingdom","vendor_url":null},{"name":"Fluidstack","domain":"fluidstack.io","purpose":"Infrastructure Provder","location":"United States","vendor_url":null},{"name":"GMI","domain":"gmicloud.ai","purpose":"Infrastructure provider","location":"Taiwan","vendor_url":null},{"name":"Google Cloud Platform","domain":"google.com","purpose":"Cloud infrastructure and service provider","location":"United States, Japan, Australia, Sweden, United Kingdom, Germany, Netherlands, Switzerland, France","vendor_url":"https://certreports.com/vendors/google/security"},{"name":"IREN","domain":"iren.com","purpose":"Infrastructure provider","location":"Canada","vendor_url":null},{"name":"Lambda Labs","domain":"lambdalabs.com","purpose":"Infrastructure provider","location":"United States","vendor_url":null},{"name":"Linear","domain":"linear.app","purpose":"Internal support collaboration","location":"United States","vendor_url":"https://certreports.com/vendors/linear/security"},{"name":"Oracle Cloud Infrastructure","domain":"oracle.com","purpose":"Cloud infrastructure and service provider","location":"United States, Japan, United Kingdom, Germany, Australia","vendor_url":"https://certreports.com/vendors/oracle/security"},{"name":"Pylon","domain":"usepylon.com","purpose":"Customer support platform","location":"United States","vendor_url":"https://certreports.com/vendors/pylon-usepylon/security"},{"name":"Slack","domain":"slack.com","purpose":"Collaboration","location":"United States","vendor_url":"https://certreports.com/vendors/slack-technologies/security"},{"name":"TensorWave","domain":"tensorwave.com","purpose":"Infrastructure Provder","location":"United States","vendor_url":null},{"name":"Vercel","domain":"vercel.com","purpose":"Frontend hosting","location":"United States","vendor_url":"https://certreports.com/vendors/vercel/security"},{"name":"Vultr","domain":"vultr.com","purpose":"Infrastructure Provider","location":"United States","vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T04:44:03.557Z"}