{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"n8n","name":"n8n","domain":"n8n.io","category":"No-code and automation","one_liner":"n8n is a workflow automation platform and the Berlin company, n8n GmbH, that develops it","trust_center_url":"https://trust.n8n.io/","security_page_url":null,"url":"https://certreports.com/vendors/n8n/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 19 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"drata","url":"https://certreports.com/vendors/n8n/soc-2","evidence":[{"source_type":"trust_center","source_name":"n8n trust centre (Drata)","url":"https://trust.n8n.io/","fetched_at":"2026-09-19 07:33:26.039382+00","content_hash":"e1d455fd158020e888addf68a9ec0dde4da94a6d701d4e3d116d69866f68e8aa","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Drata) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"drata","url":"https://certreports.com/vendors/n8n/gdpr","evidence":[{"source_type":"trust_center","source_name":"n8n trust centre (Drata)","url":"https://trust.n8n.io/","fetched_at":"2026-09-19 07:33:26.039382+00","content_hash":"e1d455fd158020e888addf68a9ec0dde4da94a6d701d4e3d116d69866f68e8aa","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"soc-3","framework_name":"SOC 3","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a public SOC 3 report on its trust centre (Drata) as of 19 Sep 2026.","kind":null,"status_text":"Vendor states SOC 3 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-19","under_review":false,"source":"drata","url":"https://certreports.com/vendors/n8n/security","evidence":[{"source_type":"trust_center","source_name":"n8n trust centre (Drata)","url":"https://trust.n8n.io/","fetched_at":"2026-09-19 07:33:26.039382+00","content_hash":"e1d455fd158020e888addf68a9ec0dde4da94a6d701d4e3d116d69866f68e8aa","wayback_url":null,"quote":"SOC 3","confidence":1}]}],"brief":{"summary":"n8n states on its trust centre that it has a SOC 2 Type II report, as of 19 Sep 2026. n8n states on its trust centre that it complies with GDPR, as of 19 Sep 2026. n8n states on its trust centre that it holds a SOC 3 report, as of 19 Sep 2026. All three claims are vendor statements sourced from Drata rather than registry-verified listings, as of 19 Sep 2026. No public evidence was found for ISO/IEC 27001 or HIPAA for n8n, as of 19 Sep 2026.","bullets":["SOC 2 Type II - vendor-stated on trust centre, as of 19 Sep 2026, not independently verified","GDPR - vendor-stated compliance claim on trust centre, as of 19 Sep 2026","SOC 3 - vendor-stated on trust centre, as of 19 Sep 2026; no ISO/IEC 27001 or HIPAA evidence found"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 10:42:42.449635+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-21T00:57:09.824Z"}