{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"formal","name":"Formal","domain":"joinformal.com","category":"Security","one_liner":"Take control of your data in real-time.","trust_center_url":"https://security.joinformal.com/","security_page_url":null,"url":"https://certreports.com/vendors/formal/security","last_verified_at":"2026-11-03T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Drata) as of 3 Nov 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-03","under_review":false,"source":"drata","url":"https://certreports.com/vendors/formal/hipaa","evidence":[{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-11-03 02:03:14.560971+00","content_hash":"5ca2cb1a6eecb86fc06f2a39f586a143e8203b8c4d91db55336cd862b1de4b03","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-11-01 02:03:17.245388+00","content_hash":"52389bdc36fbe5fe5b8bbcd5cb9e244c0b2b09ef3da3e3caab62236f01cc6d3a","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-31 02:03:12.803559+00","content_hash":"6bd6a9d78af4fedb07d1162c87fbacf38cd1dff773b34e17a352aed5e05a5946","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-29 02:03:13.800115+00","content_hash":"16697132f9769b5158186f7014937a6b2fba2f9ef14e6c2e82bf682c0ba90756","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-27 02:03:12.498798+00","content_hash":"85f05f3115a8e0124b3d6f3aaffc1e6aa9fcdd3ce0e364aa70b271bb59e1a2b7","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-25 02:03:11.910887+00","content_hash":"65292e1d58a1e5cad93952012ddc1000e40d8e8563ec8d897684a240c351da21","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-23 02:03:14.094535+00","content_hash":"2793a470da91855a4fa2b8f102a1b2493e1db9056eb79efc13bb2f87a09ad5fe","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-21 02:03:13.970269+00","content_hash":"f3485f8fefd77285e7783949a08eeb81846907c4aa4bd7d5f87bf1e08545fa06","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-19 02:03:17.670361+00","content_hash":"826f1c33eb8b0ada7a1e2b86d39ef177006a026b5ca18cacf0c2fe972662349c","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-17 02:03:15.295244+00","content_hash":"4cc0749680a4a4bc1cffb905f4f4992e8dfc7f295083990f2596dc26985ad421","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-15 02:03:14.426826+00","content_hash":"f642bc5754ad47c413e5b1f0d451e479716d681b093b926eabbf15229fa642c2","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-13 02:03:13.767165+00","content_hash":"d62445737a7ce57ec8879e2da1785066fee224577daaf9aaa02ef657e8e38b98","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-11 02:03:13.847652+00","content_hash":"f3da49c78a0ea686be23ae021608561308d857635aa3b5459723e552933e1526","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-09 02:07:17.085016+00","content_hash":"37ccb5944814369bb399aa712c8b2449d3b67580ce0be96af9993d8c4228ae02","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-07 02:03:15.746645+00","content_hash":"e658d7c632e27d886c643185b5ee6f2bed50e3e0daa4b66b1ec006b9d04631f0","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-05 02:03:13.955635+00","content_hash":"333f21a006b127155f42c83b9648afa4f3caa66c67ee0fb52cb25686b7c81e43","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-03 02:03:14.813006+00","content_hash":"34afda0c60d7cb834e13821728a735794536eac855609c6c134ec0b1ba313c2a","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-01 02:03:24.026751+00","content_hash":"ec86e6ec13973a835052daceeef712bef7eb08db519571cfbebe2b7da6e55916","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-29 02:03:14.246121+00","content_hash":"7b727a241c1b1aef1863fa89ed39dbcc267b7e4817ed9cfa2f39d57d9ae512a3","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-27 02:03:14.434086+00","content_hash":"27e1b726378fa55eff299f8980a1ac2c907fa6e32fd38fa4206010a271ef2a19","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-25 04:47:38.496584+00","content_hash":"ae6c4230de76dd827b757762bdc92c366703fa4bad264177fb5ae87b295e34ce","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-21 22:22:23.764279+00","content_hash":"f267875ac1f4a2a133ed62137c01e87f0dade877fe7330ed613b8f89a7e35a9f","wayback_url":null,"quote":"HIPAA","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-18 22:49:00.405521+00","content_hash":"582f4424faa8053366e487d9fdab536f4ee02946401aecceb7479f45c8555a84","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 3 Nov 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-03","under_review":false,"source":"drata","url":"https://certreports.com/vendors/formal/soc-2","evidence":[{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-11-03 02:03:14.560971+00","content_hash":"5ca2cb1a6eecb86fc06f2a39f586a143e8203b8c4d91db55336cd862b1de4b03","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-11-01 02:03:17.245388+00","content_hash":"52389bdc36fbe5fe5b8bbcd5cb9e244c0b2b09ef3da3e3caab62236f01cc6d3a","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-31 02:03:12.803559+00","content_hash":"6bd6a9d78af4fedb07d1162c87fbacf38cd1dff773b34e17a352aed5e05a5946","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-29 02:03:13.800115+00","content_hash":"16697132f9769b5158186f7014937a6b2fba2f9ef14e6c2e82bf682c0ba90756","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-27 02:03:12.498798+00","content_hash":"85f05f3115a8e0124b3d6f3aaffc1e6aa9fcdd3ce0e364aa70b271bb59e1a2b7","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-25 02:03:11.910887+00","content_hash":"65292e1d58a1e5cad93952012ddc1000e40d8e8563ec8d897684a240c351da21","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-23 02:03:14.094535+00","content_hash":"2793a470da91855a4fa2b8f102a1b2493e1db9056eb79efc13bb2f87a09ad5fe","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-21 02:03:13.970269+00","content_hash":"f3485f8fefd77285e7783949a08eeb81846907c4aa4bd7d5f87bf1e08545fa06","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-19 02:03:17.670361+00","content_hash":"826f1c33eb8b0ada7a1e2b86d39ef177006a026b5ca18cacf0c2fe972662349c","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-17 02:03:15.295244+00","content_hash":"4cc0749680a4a4bc1cffb905f4f4992e8dfc7f295083990f2596dc26985ad421","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-15 02:03:14.426826+00","content_hash":"f642bc5754ad47c413e5b1f0d451e479716d681b093b926eabbf15229fa642c2","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-13 02:03:13.767165+00","content_hash":"d62445737a7ce57ec8879e2da1785066fee224577daaf9aaa02ef657e8e38b98","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-11 02:03:13.847652+00","content_hash":"f3da49c78a0ea686be23ae021608561308d857635aa3b5459723e552933e1526","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-09 02:07:17.085016+00","content_hash":"37ccb5944814369bb399aa712c8b2449d3b67580ce0be96af9993d8c4228ae02","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-07 02:03:15.746645+00","content_hash":"e658d7c632e27d886c643185b5ee6f2bed50e3e0daa4b66b1ec006b9d04631f0","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-05 02:03:13.955635+00","content_hash":"333f21a006b127155f42c83b9648afa4f3caa66c67ee0fb52cb25686b7c81e43","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-03 02:03:14.813006+00","content_hash":"34afda0c60d7cb834e13821728a735794536eac855609c6c134ec0b1ba313c2a","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-01 02:03:24.026751+00","content_hash":"ec86e6ec13973a835052daceeef712bef7eb08db519571cfbebe2b7da6e55916","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-29 02:03:14.246121+00","content_hash":"7b727a241c1b1aef1863fa89ed39dbcc267b7e4817ed9cfa2f39d57d9ae512a3","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-27 02:03:14.434086+00","content_hash":"27e1b726378fa55eff299f8980a1ac2c907fa6e32fd38fa4206010a271ef2a19","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-25 04:47:38.496584+00","content_hash":"ae6c4230de76dd827b757762bdc92c366703fa4bad264177fb5ae87b295e34ce","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-21 22:22:23.764279+00","content_hash":"f267875ac1f4a2a133ed62137c01e87f0dade877fe7330ed613b8f89a7e35a9f","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-18 22:49:00.405521+00","content_hash":"582f4424faa8053366e487d9fdab536f4ee02946401aecceb7479f45c8555a84","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 3 Nov 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-03","under_review":false,"source":"drata","url":"https://certreports.com/vendors/formal/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-11-03 02:03:14.560971+00","content_hash":"5ca2cb1a6eecb86fc06f2a39f586a143e8203b8c4d91db55336cd862b1de4b03","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-11-01 02:03:17.245388+00","content_hash":"52389bdc36fbe5fe5b8bbcd5cb9e244c0b2b09ef3da3e3caab62236f01cc6d3a","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-31 02:03:12.803559+00","content_hash":"6bd6a9d78af4fedb07d1162c87fbacf38cd1dff773b34e17a352aed5e05a5946","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-29 02:03:13.800115+00","content_hash":"16697132f9769b5158186f7014937a6b2fba2f9ef14e6c2e82bf682c0ba90756","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-27 02:03:12.498798+00","content_hash":"85f05f3115a8e0124b3d6f3aaffc1e6aa9fcdd3ce0e364aa70b271bb59e1a2b7","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-25 02:03:11.910887+00","content_hash":"65292e1d58a1e5cad93952012ddc1000e40d8e8563ec8d897684a240c351da21","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-23 02:03:14.094535+00","content_hash":"2793a470da91855a4fa2b8f102a1b2493e1db9056eb79efc13bb2f87a09ad5fe","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-21 02:03:13.970269+00","content_hash":"f3485f8fefd77285e7783949a08eeb81846907c4aa4bd7d5f87bf1e08545fa06","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-19 02:03:17.670361+00","content_hash":"826f1c33eb8b0ada7a1e2b86d39ef177006a026b5ca18cacf0c2fe972662349c","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-17 02:03:15.295244+00","content_hash":"4cc0749680a4a4bc1cffb905f4f4992e8dfc7f295083990f2596dc26985ad421","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-15 02:03:14.426826+00","content_hash":"f642bc5754ad47c413e5b1f0d451e479716d681b093b926eabbf15229fa642c2","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-13 02:03:13.767165+00","content_hash":"d62445737a7ce57ec8879e2da1785066fee224577daaf9aaa02ef657e8e38b98","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-11 02:03:13.847652+00","content_hash":"f3da49c78a0ea686be23ae021608561308d857635aa3b5459723e552933e1526","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-09 02:07:17.085016+00","content_hash":"37ccb5944814369bb399aa712c8b2449d3b67580ce0be96af9993d8c4228ae02","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-07 02:03:15.746645+00","content_hash":"e658d7c632e27d886c643185b5ee6f2bed50e3e0daa4b66b1ec006b9d04631f0","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-05 02:03:13.955635+00","content_hash":"333f21a006b127155f42c83b9648afa4f3caa66c67ee0fb52cb25686b7c81e43","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-03 02:03:14.813006+00","content_hash":"34afda0c60d7cb834e13821728a735794536eac855609c6c134ec0b1ba313c2a","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-10-01 02:03:24.026751+00","content_hash":"ec86e6ec13973a835052daceeef712bef7eb08db519571cfbebe2b7da6e55916","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-29 02:03:14.246121+00","content_hash":"7b727a241c1b1aef1863fa89ed39dbcc267b7e4817ed9cfa2f39d57d9ae512a3","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-27 02:03:14.434086+00","content_hash":"27e1b726378fa55eff299f8980a1ac2c907fa6e32fd38fa4206010a271ef2a19","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-25 04:47:38.496584+00","content_hash":"ae6c4230de76dd827b757762bdc92c366703fa4bad264177fb5ae87b295e34ce","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-21 22:22:23.764279+00","content_hash":"f267875ac1f4a2a133ed62137c01e87f0dade877fe7330ed613b8f89a7e35a9f","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1},{"source_type":"trust_center","source_name":"Formal trust centre (Drata)","url":"https://security.joinformal.com/","fetched_at":"2026-09-18 22:49:00.405521+00","content_hash":"582f4424faa8053366e487d9fdab536f4ee02946401aecceb7479f45c8555a84","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1}]}],"brief":{"summary":"Formal states on its trust centre, as of 18 Sep 2026, that it displays a HIPAA badge, though this evidence row notes that BAA availability has not yet been captured. Formal states on its trust centre, as of 18 Sep 2026, that it holds SOC 2, with no further detail on report type provided in this evidence. Formal also states on its trust centre, as of 18 Sep 2026, that it holds ISO/IEC 27001. No FedRAMP, PCI DSS or EU-US Data Privacy Framework evidence was found for Formal as of 18 Sep 2026, so no public evidence found for those frameworks. All three claims for Formal are vendor-asserted trust centre statements rather than registry-verified records, as of 18 Sep 2026.","bullets":["HIPAA: vendor displays a HIPAA badge on its trust centre (as of 18 Sep 2026); BAA availability not confirmed in this evidence","SOC 2: vendor states on its trust centre that it holds SOC 2 (as of 18 Sep 2026); report type not specified","ISO/IEC 27001: vendor states on its trust centre that it holds ISO/IEC 27001 (as of 18 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:59:32.471251+00"},"legal_docs":[],"documents":[{"type":"business_continuity","title":"BC/DR","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"},{"type":"insurance","title":"Cyber Insurance","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"},{"type":"iso_certificate","title":"ISO/IEC 27001","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"},{"type":"pentest_report","title":"Penetration Testing","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"},{"type":"privacy_policy","title":"Privacy Policy","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"},{"type":"security_policy","title":"Disk Encryption","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"},{"type":"soc2_report","title":"SOC 2","availability":"on_request","source_url":"https://security.joinformal.com/","last_seen":"2026-11-03"}],"statements":[],"security_profile":{"iso42001":null,"trains_on_customer_data":null,"data_residency_regions":[],"pen_test_cadence":"report available","as_of":"2026-11-03"},"regulations_url":"https://certreports.com/api/v1/vendors/formal/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T21:37:28.880Z"}