generated: '2026-07-18'
method: searched
source: https://captureproof.com/terms/
standards:
- id: hipaa
  conforms: true
  evidence: 'Terms state CaptureProof complies with the U.S. Health Insurance Portability
    and Accountability Act (HIPAA); HIPAA/Security Policy section at /terms/#HIPAA'
- id: gdpr
  conforms: true
  evidence: 'Terms state compliance with EU General Data Protection Regulation (GDPR)
    requirements via Standard Contractual Clauses (SCCs)'
- id: swiss-fadp
  conforms: true
  evidence: 'Terms reference Swiss Federal Act on Data Protection (FADP) via contractual
    mechanisms (SCCs)'
- id: aes-256-encryption
  conforms: true
  evidence: 'Terms reference industry-standard encryption (AES-256) and a Security
    White Paper'
- id: eu-us-privacy-shield
  conforms: false
  evidence: 'Terms explicitly state CaptureProof will not renew its Privacy Shield
    certification'
- id: soc2
  conforms: false
  evidence: 'No SOC 2 attestation published on the terms/security page'
- id: iso-27001
  conforms: false
  evidence: 'No ISO 27001 certification published on the terms/security page'
notes: 'CaptureProof is a HIPAA-compliant visual health record / telemedicine platform;
  compliance posture is documented in the terms/security policy, not as third-party
  audit certifications. No public OpenAPI, so no cross-cutting API standards (rfc9457,
  oauth2, oidc, json:api) could be derived.'