generated: '2026-08-13'
method: searched
probe: true
source: https://trust.databook.com/
url: https://trust.databook.com/
certifications:
- SOC 2 Type 2
- NIST 800-171
- GDPR
- CCPA
not_certified:
- {name: ISO 27001, note: 'aligned to ISO 27001 control families per databook.com/security, but attested NOT certified'}
- {name: FedRAMP}
- {name: SOC 1}
- {name: SOC 3}
- {name: CSA STAR}
- {name: HIPAA, note: 'attested N/A'}
- {name: PCI DSS, note: 'attested N/A'}
soc2:
  type: Type 2
  criteria: [security, availability]
  auditor: "Dansa D'Arata Soucia LLP"
  most_recent_date: '2024-10-31'
  source: https://databook.com/pressrelease/databook-achieves-soc-2-type-2-certification/
controls_published:
- 'Encryption: TLS 1.2+ in transit, AES-256 at rest'
- 'Access control: SAML SSO, MFA, SCIM provisioning'
- '24/7 monitoring and documented incident response'
- 'Hosting: SaaS on AWS'
- 'Disaster recovery plan with backup and restore strategy'
compliance_page: https://databook.com/security
data_processing_addendum: https://databook.com/dpa
subprocessors: https://databook.com/service-providers
evidence:
- {source: 'https://trust.databook.com/', keywords: [soc 2, trust center], status: 200}
- {source: 'https://databook.com/security', status: 200}
- {source: 'https://learn.microsoft.com/en-us/microsoft-365-app-certification/teams/databookai-databook', status: 200}
note: >-
  trust.databook.com is a client-rendered trust portal — document downloads (the SOC 2 report)
  are request/NDA gated; the certification set above is the publicly asserted posture, cross-read
  from databook.com/security and DatabookAI's own publisher attestation to Microsoft.