generated: '2026-07-18'
method: searched
source: https://docs.diagrid.io/concepts/security
notes: >-
  Standards/compliance posture for Diagrid Catalyst. SOC 2 Type II is a published
  certification (pricing footer + security concepts doc). Dapr API and workload
  identity standards are derived from the documented architecture. No public
  OpenAPI is available to derive REST-level conformance.
standards:
  - id: soc2-type-ii
    conforms: true
    evidence: "AICPA SOC 2 Type II certified (diagrid.io/pricing footer; docs concepts/security)"
  - id: spiffe
    conforms: true
    evidence: "Workloads receive SPIFFE X.509 SVID identities signed by Dapr Sentry"
  - id: mutual-tls
    conforms: true
    evidence: "In-platform workloads mutually authenticate via SPIFFE-based mTLS"
  - id: oauth2
    conforms: true
    evidence: "Browser-based OAuth login for the diagrid CLI; access/identity tokens"
  - id: saml2-sso
    conforms: true
    evidence: "SAML 2.0 SSO for Catalyst Enterprise identity providers"
  - id: mcp
    conforms: true
    evidence: "Model Context Protocol server hosting and MCP client connect documented"
  - id: iso-27001
    conforms: false
  - id: hipaa
    conforms: false
  - id: pci-dss
    conforms: false
  - id: rfc9457-problem-details
    conforms: false