Spinach AI
Security and trust center evidence
The System of Action for Conversation Data
Summary
Spinach AI has 3 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 3 vendor-stated rows for Spinach AI, drawn from its trust centre (Drata). Spinach AI states on its trust centre that it holds that it will sign a business associate agreement, a SOC 2 Type II report and a data processing agreement, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, PCI DSS and FedRAMP as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured), vendor-stated as of 21 Sep 2026
- SOC 2: Vendor states SOC 2 on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among ai assistants vendors
0verified rows
Category median 0, across 29 indexed ai assistants vendors. Spinach AI has no registry-verified row yet, like 55 percent of them; its evidence is vendor-stated or reported.
ai notetakermeeting assistantmeeting automationmeeting summaries
Compare with similar vendors
Pick your own comparisonCompliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 21 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 21 Sep 20262 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the AI assistants category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Fireflies.ai
AI assistants
Fireflies takes notes, manages tasks, and automates workflows across meetings, email, chat, CRM, and your
SoapBox Innovations
AI assistants
Spinach is an AI meeting assistant, which helps run your meeting, summarizes the conversation and automates post-meeting
Otter.ai
AI assistants
Otter AI Meeting Agent supports real-time transcription, live chat, automated summaries, insights, and action
Perplexity
AI assistants
Perplexity AI, Inc., or simply Perplexity, is an American privately held software company offering a web search engine that processes user
Evidence against regulations
All regulations for Spinach AIHow much of each regulation’s vendor requirements Spinach AI’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read