Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

• CCPA

  Publicly advertised on the organization’s trust center.

• EU-US DPF

  Publicly advertised on the organization’s trust center.

• GDPR

  Public claim of alignment with the EU General Data Protection Regulation.

• HIPAA

  Public claim of compliance with US health-data privacy and security rules. HIPAA has no certification; compliance is self-attested.

• ISO 27001

  International standard for an information security management system, certified by accredited bodies.

• PCI DSS

  Payment card industry standard for handling cardholder data securely.

• SOC 2

  Independent CPA audit of controls for security, availability, and confidentiality.

• SOC 3

  Public summary of a SOC 2 audit, intended for general distribution.

• TISAX

  Publicly advertised on the organization’s trust center.