generated: '2026-07-18'
method: searched
source: https://www.credentially.io/security, openapi/credentially-gateway-openapi-original.json
standards:
- id: iso-27001-2022
  conforms: true
  evidence: 'Certified ISO/IEC 27001:2022 (information security management), per credentially.io/security'
- id: cyber-essentials-plus
  conforms: true
  evidence: 'Cyber Essentials Plus certified, per credentially.io/security'
- id: nhs-dsp-toolkit
  conforms: true
  evidence: 'NHS Data Security and Protection Toolkit — Standards Exceeded, per credentially.io/security'
- id: nhs-dtac
  conforms: true
  evidence: 'NHS Digital Technology Assessment Criteria (DTAC) compliant, per credentially.io/security'
- id: gdpr
  conforms: true
  evidence: 'GDPR-compliant; ICO-registered data controller, per credentially.io/security'
- id: oauth2
  conforms: false
  evidence: 'API uses http bearer (JWT API key); no OAuth2 authorization flows declared.'
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: 'Errors are HTTP-status only; no application/problem+json body declared.'
- id: fhir-r4
  conforms: false
  evidence: 'Proprietary healthcare credentialing schema; not FHIR resource shapes.'
- id: pagination
  conforms: true
  evidence: 'Page-number pagination with a Meta envelope on list endpoints.'