{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"stable","name":"Stable","domain":"usestable.com","category":"AI tools","one_liner":"A virtual address + mailbox for business","trust_center_url":"https://security.usestable.com/","security_page_url":null,"url":"https://certreports.com/vendors/stable/security","last_verified_at":"2026-09-30T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/stable/hipaa","evidence":[{"source_type":"trust_center","source_name":"Stable trust centre (Vanta)","url":"https://security.usestable.com/","fetched_at":"2026-09-29 02:06:21.381553+00","content_hash":"1971d3c26d1c73718658710b25270c2175083e39d9a49757501e9086de8d63ff","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/stable/soc-2","evidence":[{"source_type":"trust_center","source_name":"Stable trust centre (Vanta)","url":"https://security.usestable.com/","fetched_at":"2026-09-29 02:06:21.381553+00","content_hash":"1971d3c26d1c73718658710b25270c2175083e39d9a49757501e9086de8d63ff","wayback_url":null,"quote":"SOC 2","confidence":1}]}],"brief":{"summary":"Stable displays a HIPAA badge on its trust centre, as of 18 Sep 2026. The HIPAA badge is a vendor claim, and BAA availability has not yet been captured, as of 18 Sep 2026. Stable states on its trust centre that it holds SOC 2, as of 18 Sep 2026. No auditor name or report date is recorded for the SOC 2 statement, as of 18 Sep 2026. No other framework evidence was found for Stable, so no public evidence found applies to all other frameworks, as of 18 Sep 2026.","bullets":["HIPAA: vendor displays a badge on its trust centre; BAA availability not yet captured, as of 18 Sep 2026.","SOC 2: vendor states on its trust centre; no auditor or report date recorded, as of 18 Sep 2026.","No other framework evidence found for Stable, as of 18 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-21 10:52:05.02872+00"},"legal_docs":[{"kind":"subprocessors","url":"https://security.usestable.com/","availability":"public","detail":"16 subprocessors listed on the trust centre","as_of":"2026-09-30"}],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/stable/regulations/{regulation}","subprocessors":[{"name":"Airbyte","domain":"airbyte.com","purpose":"Engineering","location":null,"vendor_url":"https://certreports.com/vendors/airbyte/security"},{"name":"Algolia","domain":"algolia.com","purpose":"Engineering","location":null,"vendor_url":"https://certreports.com/vendors/algolia/security"},{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud provider","location":null,"vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Courier","domain":"courier.com","purpose":"Product","location":null,"vendor_url":"https://certreports.com/vendors/courier/security"},{"name":"Customer.io","domain":"customer.io","purpose":"Marketing","location":null,"vendor_url":"https://certreports.com/vendors/peaberry-software/security"},{"name":"Firebase","domain":"google.com","purpose":"Product","location":null,"vendor_url":"https://certreports.com/vendors/google/security"},{"name":"Google Analytics","domain":"google.com","purpose":"Data analytics","location":null,"vendor_url":"https://certreports.com/vendors/google/security"},{"name":"Hubspot","domain":"hubspot.com","purpose":"Sales","location":null,"vendor_url":"https://certreports.com/vendors/hubspot/security"},{"name":"Metabase","domain":"metabaseapp.com","purpose":"Data analytics","location":null,"vendor_url":null},{"name":"Notion","domain":"notion.com","purpose":"Collaboration","location":null,"vendor_url":null},{"name":"Retool","domain":"retool.com","purpose":"Internal tooling","location":null,"vendor_url":"https://certreports.com/vendors/retool/security"},{"name":"Segment","domain":"segment.com","purpose":"Data analytics","location":null,"vendor_url":"https://certreports.com/vendors/segment/security"},{"name":"Sentry","domain":"sentry.io","purpose":"Engineering","location":null,"vendor_url":"https://certreports.com/vendors/sentry/security"},{"name":"Stripe","domain":"stripe.com","purpose":"Finance and payments","location":null,"vendor_url":"https://certreports.com/vendors/stripe/security"},{"name":"Vanta","domain":"vanta.com","purpose":"Security","location":null,"vendor_url":"https://certreports.com/vendors/vanta/security"},{"name":"Zapier","domain":"zapier.com","purpose":"Collaboration","location":null,"vendor_url":"https://certreports.com/vendors/zapier/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T18:35:28.334Z"}