Reveal Data
Security and trust center evidence
Reveal provides world-class document review technology, underpinned by leading processing, visual analytics, and artificial intelligence
Summary
Reveal Data has 2 registry-verified rows and 4 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 2 registry-verified rows and 4 vendor-stated rows for Reveal Data, drawn from its trust centre (Drata), the CSA STAR registry and the Data Privacy Framework list. Reveal Data is listed in the CSA STAR registry for CSA STAR (STAR Level 2 certification), dated 4 Sep 2018. Reveal Data states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report, a data processing agreement and an ISO/IEC 27001 certificate, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for PCI DSS and FedRAMP as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- CSA STAR: STAR Level 2 certification, verified as of 26 Oct 2026
- EU-US Data Privacy Framework: Active: UK Extension Certification, SW-US Certification, EU-US Certification, verified as of 2 Nov 2026
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among ai tools vendors
2verified rows
Category median 0, across 96 indexed ai tools vendors. Reveal Data has more verified rows than 95 percent of them.
ai analyticsdocument reviewediscoverylegal tech
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 21 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001 on its trust centre
as of 21 Sep 20262 sources- CSA STARVerified
STAR Level 2 certification
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 2 Nov 20261 source
No public evidence yet for FedRAMP, PCI DSS, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence no longer foundThe row was not present in the latest ingest.
Similar vendors with evidence
Related by product tags and the AI tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Relativity ODA
Research and data providers
Relativity is a global legal data intelligence
CS Disco
Legal tech
DISCO's AI-driven legal software and services raise the bar by offering cloud-based solutions developed by lawyers for
Elite Discovery
Cloud and hosting
Elite Discovery provides eDiscovery, digital forensics, AI-powered litigation support, managed review, secure document hosting, and
Synthesia
AI tools
Synthesia Limited is a British multinational artificial intelligence company based in London, United Kingdom
Evidence against regulations
All regulations for Reveal DataHow much of each regulation’s vendor requirements Reveal Data’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read