generated: '2026-09-07'
method: searched
source: https://adaptive.live/security
description: >-
  Adaptive publishes its own security posture as a narrative page at
  https://adaptive.live/security rather than as a hosted trust portal. A host at
  trust.adaptive.live resolves but answers HTTP 403 behind a Cloudflare bot challenge to
  every client tried, so its contents could not be read and nothing is asserted about it.
url: https://adaptive.live/security
program_sections:
- Secure Personnel — background checks, NDAs, security training
- Secure Development — secure SDLC, design review, OWASP Top 10, annual secure-coding training
- Secure Testing — third-party penetration testing and vulnerability scanning of all
  production and internet-facing systems, plus SAST and DAST including open-source libraries
- Cloud Security — per-customer trust-zone isolation, unique encryption keys, encryption at
  rest and in transit, role-based and least-privilege access
- Compliance — external certification
certifications:
- name: SOC 2 Type II
  body: AICPA
  auditor: Prescient Assurance
  status: completed
  evidence: >-
    "Adaptive Automation Technologies successfully completed the AICPA Service Organization
    Control (SOC) 2 Type II audit." — https://adaptive.live/security
  report_access: On request; the page directs report requests to debarshi@adaptive.live.
misattribution_note: >-
  The words HIPAA, GDPR and CSA STAR also appear on this page, but ONLY inside the
  description of the auditor (Prescient Assurance) and its other service lines — they are
  NOT claimed as Adaptive's own certifications. They are deliberately excluded from
  certifications[] above. Adaptive's product separately helps CUSTOMERS track SOC 2, ISO
  27001, HIPAA, PCI-DSS and GDPR control posture (see the Compliance module in
  https://documentation.adaptive.live/platform/compliance); those are product features, not
  Adaptive's own attestations, and are recorded in conformance/ as such.
x-evidence:
- url: https://adaptive.live/security
  http_status: 200
  fetched: '2026-09-07'
- url: https://trust.adaptive.live/
  http_status: 403
  fetched: '2026-09-07'
  note: Cloudflare bot challenge; contents unreadable, nothing asserted.