Compliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 21 Sep 20262 sources
FedRAMPVerifiedAgency In Process
as of 4 Nov 202649 sources · A-LIGN Compliance and Security, Inc. dba A-LIGN
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 2 Nov 20264 sources · KYTE Consultants, Ltd.
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001 on its trust centre
as of 21 Sep 20262 sources
Cyber EssentialsVendor-statedVendor states Cyber Essentials on its trust centre
as of 21 Sep 20262 sources- SOC 1Vendor-stated
Vendor states SOC 1 Type 2 on its trust centre
as of 21 Sep 20262 sources - SOC 3Vendor-stated
Vendor states SOC 3 on its trust centre
as of 21 Sep 20262 sources 
ISO 22301Vendor-statedVendor states ISO 22301:2019 on its trust centre
as of 21 Sep 20262 sources
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 21 Sep 20262 sources
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.