Simetrik
Compliance evidence
No code enterprise SaaS for financial control automation.
Compliance grid
SOC 2VerifiedEvidenced by the public SOC 3 report for the same examination period
as of 2 Nov 20261 source
PCI DSSVendor-statedVendor states PCI-DSS 4.0 on its trust centre
as of 21 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO 27001 on its trust centre
as of 21 Sep 20262 sources
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
ISO/IEC 27701Vendor-statedVendor states ISO 27701 on its trust centre
as of 21 Sep 20262 sources- SOC 1Vendor-stated
Vendor states SOC 1 on its trust centre
as of 21 Sep 20262 sources - SOC 3Verified
Public SOC 3 report on the vendor's trust centre
as of 2 Nov 20261 source 
ISO/IEC 27017Vendor-statedVendor states ISO 27017 on its trust centre
as of 21 Sep 20262 sources
ISO/IEC 27018Vendor-statedVendor states ISO 27018 on its trust centre
as of 21 Sep 20262 sources
No public evidence yet for HIPAA, GDPR, FedRAMP, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.