generated: '2026-07-18'
method: searched
source: https://cipherowl.com/trust + openapi/cipherowl-openapi.json
standards:
- id: oauth2-client-credentials
  conforms: true
  evidence: OAuth 2.0 client-credentials token flow at https://svc.cipherowl.ai/oauth/token
    returning a Bearer access_token with expires_in and scope.
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use the gRPC-gateway google.rpc.Status envelope (rpcStatus), not
    application/problem+json.
- id: rfc9116-security-txt
  conforms: true
  evidence: /.well-known/security.txt published at cipherowl.com (canonical) and
    cipherowl.ai.
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type II completed; independent examination of security, availability
    and confidentiality controls (Vanta trust report).
- id: iso-27001
  conforms: false
  evidence: In-progress alignment with ISO 27001 (not yet certified per trust page).
- id: tls-1.3
  conforms: true
  evidence: TLS 1.3 in transit; AES-256 at rest (trust page); probed TLSv1.3 on
    svc.cipherowl.ai.
compliance_program:
  soc2_type2: completed
  iso_27001: in-progress
  iwf_membership: true
  trust_report: https://app.vanta.com/cipherowl.com/trust/ua1li0yqp3zk221yfd1c8u
  trust_page: https://cipherowl.com/trust