generated: '2026-07-18'
method: searched
source: >-
  https://developer.devrev.ai/ + https://security.devrev.ai/
standards:
- id: rest
  conforms: true
  evidence: Resource-oriented URLs, JSON bodies, standard HTTP verbs/status codes.
- id: openapi-3.0
  conforms: true
  evidence: DevRev publishes OpenAPI 3.0 specifications for its APIs (auth-gated download).
- id: bearer-token-auth
  conforms: true
  evidence: Personal Access Token sent as HTTP Bearer in Authorization header.
- id: oauth2
  conforms: false
  evidence: No user-facing OAuth2 authorization flow documented for the public API.
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Error envelope is a plain { message } object, not application/problem+json.
- id: cursor-pagination
  conforms: true
  evidence: next_cursor-based pagination documented.
- id: webhooks-hmac-sha256
  conforms: true
  evidence: X-DevRev-Signature HMAC-SHA256 payload signing.
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type 2 attestation published via the DevRev Trust Center.
- id: iso-27001
  conforms: true
  evidence: ISO/IEC 27001 certification published via the DevRev Trust Center.
compliance_program:
  url: https://security.devrev.ai/
  certifications: [SOC 2 Type 2, ISO 27001, HIPAA, GDPR]
  ref: security/devrev-trust-center.yml