generated: '2026-07-18'
method: searched
source: https://brightflag.com/security/
standards:
- id: oauth2
  conforms: true
  evidence: API authenticates via OAuth 2.0 token endpoint returning a bearer access_token
    (Brightflag API Guide).
- id: openapi-3.1
  conforms: true
  evidence: API portal advertises "OAS 3.1" (enterprise.brightflag.com/developer).
- id: soc2
  conforms: true
  evidence: SOC 2 named on the Brightflag security/trust page.
- id: iso-27001
  conforms: true
  evidence: ISO/IEC 27001 named on the Brightflag security/trust page.
- id: gdpr
  conforms: true
  evidence: GDPR compliance stated on the Brightflag security/trust page.
- id: rfc9457-problem-details
  conforms: false
  evidence: Not documented publicly; full API reference is gated.
- id: oidc
  conforms: false
  evidence: No OIDC discovery document published.
compliance_program:
  page: https://brightflag.com/security/
  certifications:
  - SOC 2
  - ISO 27001
  - GDPR