generated: '2026-07-18'
method: searched
source: https://www.celona.io/security
standards:
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type II certification stated on https://www.celona.io/security (report at /soc-2-compliance)
- id: gdpr
  conforms: true
  evidence: GDPR compliance with DPAs and standard contractual clauses stated on https://www.celona.io/security
- id: nist-ssdf
  conforms: true
  evidence: Secure SDLC based on the NIST Secure Software Development Framework (security page)
- id: api-key-auth
  conforms: true
  evidence: All API operations require an X-API-Key header
- id: rfc9457-problem-details
  conforms: false
  evidence: Responses use a custom code/success/data/error envelope, not application/problem+json
- id: oauth2
  conforms: false
  evidence: No OAuth2 flow documented for the public REST API (X-API-Key only)
- id: iso-27001
  conforms: false
  evidence: Not claimed on the public security page