Carma
Security and trust center evidence
The agentic workspace that runs construction operations for profit
Summary
Carma has 1 vendor-stated row in the CertReports index, last verified 21 Sep 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 1 vendor-stated row for Carma, drawn from its trust centre (Vanta). Carma states on its trust centre that it holds a SOC 2 Type II report, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, HIPAA, GDPR and PCI DSS as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- SOC 2: Vendor states SOC 2 Type II on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among no-code and automation vendors
0verified rows
Category median 1, across 113 indexed no-code and automation vendors. Carma has no registry-verified row yet, like 49 percent of them; its evidence is vendor-stated or reported.
ai fleet opsfleet managementfleet operations
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
Subprocessors (4)
Amazon Web ServicesCloud provider · United States
AnthropicAI features for engineering · United States- MIMixpanelData analytics · United States
- OPOpenAIAI features for engineering · United States
Security profile
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Similar vendors with evidence
Related by product tags and the No-code and automation category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Celigo
No-code and automation
Build, run, and govern automation on one
Jitterbit
No-code and automation
Ignite business productivity with data orchestration, iPaaS, workflow automation, and low-code app development solutions—all on one unified
Kizen Technologies
No-code and automation
Kizen provides the first no-code and enterprise-grade CRM, Insights, and Operations
SnapLogic
No-code and automation
Unify people with every app, all data and any agent on a governed integration
Evidence against regulations
All regulations for CarmaHow much of each regulation’s vendor requirements Carma’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read