Datasaur
Security and trust center evidence
Datasaur builds private AI/agents for enterprise/government
Summary
Datasaur has 3 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 3 vendor-stated rows for Datasaur, drawn from its trust centre (Vanta). Datasaur states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report and a data processing agreement, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, PCI DSS and FedRAMP as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
- SOC 2: Vendor states SOC 2 Type 2 on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among compliance and grc vendors
0verified rows
Category median 1, across 179 indexed compliance and grc vendors. Datasaur has no registry-verified row yet, like 47 percent of them; its evidence is vendor-stated or reported.
document intelligenceenterprise ai agentspii redactionprivate ai deployment
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 22 Sep 2026BAA availability changedBAA availability moved from unknown to on_request.
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Drata
Compliance and GRC
Drata’s AI-native compliance automation & agentic trust management platform powers GRC and assurance (GRC +A) for startups, mid-size
SafetyKit
Compliance and GRC
AI agents for risk, compliance, and safety
Inscribe
Compliance and GRC
AI Document Fraud Detection for Banks, Credit Unions & Lenders
Electronic Documents Centre
Compliance and GRC
EDC helps banks, government, and large enterprises in the UAE verify identities, digitize documents, automate operations, and communicate
Evidence against regulations
All regulations for DatasaurHow much of each regulation’s vendor requirements Datasaur’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read