Summary
Axiom has 3 vendor-stated rows, and 1 expired in the CertReports index, last verified 17 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2026-09-17, Axiom states on its trust centre that it displays a HIPAA badge, though BAA availability is not yet captured, so this should be treated as a vendor claim only. As of 2026-09-17, Axiom states on its trust centre that it holds SOC 2, though no report details are provided in the evidence. As of 2026-09-17, Axiom states on its trust centre that it holds ISO/IEC 27001:2022. As of 2026-09-17, Axiom is listed in the EU-US Data Privacy Framework registry with an expired/inactive status. No public evidence found for other frameworks beyond those listed above as of 2026-09-17.
- HIPAA: vendor states a HIPAA badge on its trust centre as of 2026-09-17 (BAA availability not confirmed)
- SOC 2 and ISO/IEC 27001:2022: vendor states both on its trust centre as of 2026-09-17
- EU-US Data Privacy Framework: listed as expired/inactive as of 2026-09-17
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.
Among analytics vendors
0verified rows
Category median 0, across 85 indexed analytics vendors. Axiom has more verified rows than 66 percent of them.
Compare with similar vendors
Pick your own comparisonCompliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 17 Sep 20261 source
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 17 Sep 20261 source
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 17 Sep 20261 source
EU-US Data Privacy FrameworkExpiredInactive
as of 17 Sep 20261 source
Legal artefacts
Subprocessors (16)
Amazon Web ServicesCloud services · USA, EU- CLClayGo-to-market data operations · USA
CloudflareEdge computing · USA, EU
Customer.ioTransactional, broadcast, and marketing messaging · USA, EU- FIFireworksGenerative AI capabilities · USA
- GAGoogle Analytics, Google Tag Manager (Google LLC.)User analytics, and marketing insights · USA
- GGGoogle GeminiAI foundation model · USA
- PLPlanetscaleDatabase platform · USA, EU
PostHogProduct analytics and session replay capabilities · USA
SegmentUser experience insights · USA- SFSentry (Functional Software Inc.)Crash & error monitoring · USA
- SLSlackEvent Monitoring · USA
StripePayment Processing · USA- SUSupabaseInternal go-to-market tooling · USA
VercelEngineering · USA, EU- WOWorkOSEnterprise user authentication · USA
Change history
- 17 Sep 2026Subprocessor added: PostHogPostHog appeared on the subprocessor list.
- 17 Sep 2026Subprocessor added: FireworksFireworks appeared on the subprocessor list.
- 17 Sep 2026Subprocessor added: SegmentSegment appeared on the subprocessor list.
- 17 Sep 2026Subprocessor added: Google Analytics, Google Tag Manager (Google LLC.)Google Analytics, Google Tag Manager (Google LLC.) appeared on the subprocessor list.
- 17 Sep 2026Subprocessor added: Google GeminiGoogle Gemini appeared on the subprocessor list.
- 17 Sep 2026Subprocessor added: PlanetscalePlanetscale appeared on the subprocessor list.
- 17 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 17 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 17 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Analytics category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
