Prisma gives TypeScript and Node.js teams Prisma ORM, Prisma Postgres, and Prisma Compute: a type-safe ORM, managed Postgres, and Compute for deploying TypeScript apps, from schema to deployed app.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
HIPAA
Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Graphcool, Inc discloses on its trust center. Linked entries have their own profile in the Trust Index.
68% chain trust: 15 of 22 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Cloud Provider
- Brevo (SendinBlue) Customer Communications
- Cloudflare Cloud monitoring
- Stripe, Inc. Payment Processing
- Google Workspace Identity provider and Communication
- dbt Labs Data Analytics
- Fivetran Data Analytics
- Snowflake Data Analytics
- Slack Communication
- Notion Internal Documentation
- GitHub Version Control
- Cal.com, Inc. Customer Meetings
- Kapa.ai Inc. AI Search
- Vercel Engineering
- Tolt Affiliate referral tracking
- Zapier Inc Billing Notiications
- Anthropic (Claude)
- The Constant Company, LLC (VULTR) Cloud provider
- PostHog UX Analytics
- Sentry Cloud Monitoring
- Axiom, Inc. Logs
- ClickHouse Cloud monitoring
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
