generated: '2026-07-18'
method: derived
source: openapi/codesphere-openapi-original.json
standards:
- id: openapi-3.0
  conforms: true
  evidence: Public API published as OpenAPI 3.0.0 (Codesphere Public API 0.1.0).
- id: oauth2
  conforms: false
  evidence: Only http bearer (Personal Access Token) auth; no oauth2 flows declared.
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: partial
  evidence: >-
    Error bodies use a problem shape (status/title/detail/traceId) but are served
    as application/json rather than application/problem+json.
- id: sse
  conforms: true
  evidence: Log endpoints stream Server-Sent Events (text/event-stream).
- id: pagination-limit-offset
  conforms: true
  evidence: List/usage endpoints accept limit and offset query parameters.
- id: soc2
  conforms: true
  evidence: SOC 1 & 2 attested (Drata trust center; codesphere.com/security).
- id: iso-27001
  conforms: true
  evidence: ISO 27001 certified (Drata trust center; codesphere.com/security).
- id: gdpr
  conforms: true
  evidence: EU-built sovereign cloud; privacy policy and imprint published.
compliance_programs:
  certifications: [SOC 1, SOC 2, ISO 27001]
  trust_center: https://app.drata.com/trust/be8cadd3-0d8d-48cf-ad18-2aecbc39cc9d
  security_page: https://www.codesphere.com/security