{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"raycast","name":"Raycast","domain":"raycast.com","category":"Developer tools","one_liner":"Speed up non-coding tasks for engineering teams","trust_center_url":"https://trust.raycast.com/","security_page_url":null,"url":"https://certreports.com/vendors/raycast/security","last_verified_at":"2026-09-30T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/raycast/soc-2","evidence":[{"source_type":"trust_center","source_name":"Raycast trust centre (Vanta)","url":"https://trust.raycast.com/","fetched_at":"2026-09-29 02:10:25.881306+00","content_hash":"2f4b2f898df5ef840d66e3a5a13b4fc70c268199208ed678787b4afc12979f5a","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Raycast trust centre (Vanta)","url":"https://trust.raycast.com/","fetched_at":"2026-09-18 23:14:40.912392+00","content_hash":"3260d14e060b55ab99d24ce2e118b248445f8dc9268322e38072f65a82c379e3","wayback_url":null,"quote":"SOC 2","confidence":1}]}],"brief":{"summary":"Raycast states on its trust centre that it holds SOC 2, as of 27 Sep 2026, though the report type is not specified. No public evidence was found for ISO/IEC 27001 for Raycast as of 27 Sep 2026. No public evidence was found for GDPR for Raycast as of 27 Sep 2026. No public evidence was found for HIPAA for Raycast as of 27 Sep 2026. No public evidence was found for CCPA/CPRA for Raycast as of 27 Sep 2026, and the SOC 2 statement referenced above remains the only compliance evidence currently on file for this vendor.","bullets":["SOC 2: vendor states on its trust centre, as of 27 Sep 2026 - report type not specified.","ISO/IEC 27001: no public evidence found, as of 27 Sep 2026.","GDPR, HIPAA and CCPA/CPRA: no public evidence found, as of 27 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-27 05:52:05.56568+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.raycast.com/","availability":"public","detail":"30 subprocessors listed on the trust centre","as_of":"2026-09-30"},{"kind":"privacy","url":"https://www.raycast.com/privacy","availability":"public","detail":null,"as_of":"2026-09-30"}],"documents":[{"type":"pentest_report","title":"2025 - Penetration Test Report","availability":"on_request","source_url":"https://trust.raycast.com/","last_seen":"2026-09-30"},{"type":"soc2_report","title":"2025 - SOC 2 Type II Report","availability":"on_request","source_url":"https://trust.raycast.com/","last_seen":"2026-09-30"},{"type":"soc2_report","title":"2026 - SOC 2 Type II Report","availability":"on_request","source_url":"https://trust.raycast.com/","last_seen":"2026-09-30"}],"statements":[],"security_profile":{"iso42001":null,"trains_on_customer_data":null,"data_residency_regions":[],"pen_test_cadence":"annual","as_of":"2026-09-30"},"regulations_url":"https://certreports.com/api/v1/vendors/raycast/regulations/{regulation}","subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud infrastructure","location":"Luxembourg","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Anthropic","domain":"anthropic.com","purpose":"Generative AI functionalities","location":"Ireland","vendor_url":"https://certreports.com/vendors/anthropic/security"},{"name":"Baseten","domain":"baseten.co","purpose":"Generative AI functionalities","location":"United States","vendor_url":null},{"name":"Braintrust Data, Inc.","domain":"braintrust.dev","purpose":"AI Feedback and Performance Monitoring","location":"United States","vendor_url":null},{"name":"Cerebras Systems Inc.","domain":"cerebras.ai","purpose":"Speech-to-Text Post-processing","location":"United States","vendor_url":null},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"Content Delivery Network","location":"United States","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"CRUNCHY DATA SOLUTIONS, INC.","domain":"crunchydata.com","purpose":"Primary Database Hosting","location":"United States","vendor_url":null},{"name":"ElevenLabs","domain":"elevenlabs.io","purpose":"Speech-to-Text Conversion","location":"United States","vendor_url":"https://certreports.com/vendors/elevenlabs/security"},{"name":"Firecrawl","domain":"firecrawl.dev","purpose":"Web Content Extraction","location":"United States","vendor_url":"https://certreports.com/vendors/firecrawl/security"},{"name":"Front","domain":"front.com","purpose":"Email Management and Customer Communication","location":"United States","vendor_url":"https://certreports.com/vendors/front/security"},{"name":"Google AI","domain":"google.dev","purpose":"Generative AI functionalities","location":"United States","vendor_url":null},{"name":"Groq","domain":"groq.com","purpose":"Generative AI functionalities","location":"United Kingdom","vendor_url":"https://certreports.com/vendors/groq/security"},{"name":"Heroku","domain":"heroku.com","purpose":"Backend Application Hosting and Data Caching","location":"United Kingdom","vendor_url":"https://certreports.com/vendors/heroku/security"},{"name":"Mistral AI","domain":"mistral.ai","purpose":"Generative AI functionalities","location":"France","vendor_url":"https://certreports.com/vendors/mistral-ai/security"},{"name":"New Relic","domain":"newrelic.com","purpose":"Application Performance Monitoring and Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/new-relic/security"},{"name":"OpenAI","domain":"openai.com","purpose":"Generative AI functionalities","location":"United States","vendor_url":"https://certreports.com/vendors/openai/security"},{"name":"Paddle","domain":"profitwell.com","purpose":"Payment and Subscription Analytics, Customer Retention","location":"United States","vendor_url":"https://certreports.com/vendors/profitwell/security"},{"name":"Perplexity AI","domain":"perplexity.ai","purpose":"Generative AI functionalities","location":"United States","vendor_url":"https://certreports.com/vendors/perplexity-ai/security"},{"name":"Plain","domain":"plain.com","purpose":"Customer support","location":"United Kingdom","vendor_url":null},{"name":"PostHog Inc","domain":"posthog.com","purpose":"Product Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/posthog/security"},{"name":"Railway","domain":"railway.com","purpose":"Application Backend Hosting and Compute for the Glaze app","location":"United States","vendor_url":"https://certreports.com/vendors/railway/security"},{"name":"Replicate","domain":"replicate.com","purpose":"AI Image Generation","location":"United States","vendor_url":"https://certreports.com/vendors/replicate/security"},{"name":"Resend","domain":"resend.com","purpose":"Email Communications (Newsletter, Community)","location":"United States","vendor_url":"https://certreports.com/vendors/resend/security"},{"name":"RevenueCat","domain":"revenuecat.com","purpose":"iOS In-App Purchase and Subscription Management","location":"United States","vendor_url":"https://certreports.com/vendors/revenuecat/security"},{"name":"SendGrid","domain":"sendgrid.com","purpose":"Email Communications (Product Onboarding)","location":"United States","vendor_url":"https://certreports.com/vendors/sendgrid/security"},{"name":"Sentry","domain":"sentry.io","purpose":"Error Tracking and Crash Reporting","location":"United States","vendor_url":"https://certreports.com/vendors/sentry/security"},{"name":"Stripe","domain":"stripe.com","purpose":"Payment Processing and Subscription Management","location":"Ireland","vendor_url":"https://certreports.com/vendors/stripe/security"},{"name":"Supabase, Inc","domain":"supabase.com","purpose":"Managed Database and Backend Services for the Glaze app. Feature request storage for the Raycast app.","location":"United States","vendor_url":"https://certreports.com/vendors/supabase/security"},{"name":"Vercel","domain":"vercel.com","purpose":"Website Hosting (Marketing, Merch Store, ray.so)","location":"United States","vendor_url":"https://certreports.com/vendors/vercel/security"},{"name":"X.AI","domain":"x.ai","purpose":"Generative AI functionalities","location":"United States","vendor_url":"https://certreports.com/vendors/xai/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T18:35:56.595Z"}