Compliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 17 Sep 20261 source
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 17 Sep 20261 source
GDPRVendor-statedVendor states GDPR on its trust centre
as of 17 Sep 20261 source
FedRAMPVerifiedFedRAMP Authorized
as of 17 Sep 20261 source · Coalfire Systems, Inc.
PCI DSSVendor-statedVendor states PCI DSS on its trust centre
as of 17 Sep 20261 source
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 17 Sep 20261 source
CSA STARVerifiedSTAR Level 2 certification, Trusted Cloud Provider
as of 17 Sep 20261 source- SOC 1Vendor-stated
Vendor states SOC 1 on its trust centre
as of 17 Sep 20261 source - SOC 3Vendor-stated
Vendor states SOC 3 on its trust centre
as of 17 Sep 20261 source 
ISO/IEC 27017Vendor-statedVendor states ISO/IEC 27017:2015 on its trust centre
as of 17 Sep 20261 source
ISO/IEC 27018Vendor-statedVendor states ISO/IEC 27018:2019 on its trust centre
as of 17 Sep 20261 source
EU-US Data Privacy FrameworkExpiredInactive
as of 17 Sep 20261 source
GovRAMPVendor-statedVendor states GovRAMP on its trust centre
as of 17 Sep 20261 source
TISAXVendor-statedVendor states TISAX on its trust centre
as of 17 Sep 20261 source
BSI C5Vendor-statedVendor states C5 on its trust centre
as of 17 Sep 20261 source
ENSVendor-statedVendor states ENS on its trust centre
as of 17 Sep 20261 source
IRAPVendor-statedVendor states IRAP on its trust centre
as of 17 Sep 20261 source
No public evidence yet for Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.