Meridian AI
Security and trust center evidence
Meridian AI empowers private equity & private credit firms to source deals thematically, manage more efficient pipelines, and make better
Summary
Meridian AI has 1 registry-verified row and 2 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 registry-verified row and 2 vendor-stated rows for Meridian AI, drawn from its trust centre (Vanta) and the Data Privacy Framework list. Meridian AI is listed in the Data Privacy Framework list for EU-US Data Privacy Framework (Active: EU-US Certification, SW-US Certification, UK Extension Certification), dated 24 Apr 2024. Meridian AI states on its trust centre that it holds a SOC 2 Type II report and a data processing agreement, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, HIPAA, PCI DSS and FedRAMP as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- EU-US Data Privacy Framework: Active: EU-US Certification, SW-US Certification, UK Extension Certification, verified as of 2 Nov 2026
- SOC 2: Vendor states SOC 2 on its trust centre, vendor-stated as of 21 Sep 2026
- GDPR: Vendor states GDPR on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Evidence count
1verified rows
deal sourcinginvestment decisionspipeline managementprivate equity
Compliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 21 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 21 Sep 20262 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20261 source
Legal artefacts
Subprocessors (8)
GitHubVersion control
Google WorkspaceIdentity provider
Microsoft AzureCloud provider
NylasEmail and Calendar API Connector
OpenAILLM Capabilities
SmartBearSoftware testing & quality · United States
SnykSecurity
VantaSecurity
Security profile
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: GitHubGitHub appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Google WorkspaceGoogle Workspace appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Microsoft AzureMicrosoft Azure appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: NylasNylas appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: OpenAIOpenAI appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: SmartBearSmartBear appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: SnykSnyk appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: VantaVanta appeared on the subprocessor list.
Evidence against regulations
All regulations for Meridian AIHow much of each regulation’s vendor requirements Meridian AI’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read