generated: '2026-07-18'
method: searched
source: https://drdroid.io/security
docs: https://security.drdroid.io
compliance_program:
  published: true
  page: https://security.drdroid.io
  certifications:
  - SOC 2 Type II
  - ISO/IEC 27001
  subprocessors:
  - OpenAI
  - Anthropic
  - Slack
  - Microsoft Azure
  - Amazon Web Services
standards:
- id: soc2-type-ii
  conforms: true
  evidence: "drdroid.io/security — 'SOC 2 Type II: Independently audited'; trust center at security.drdroid.io"
- id: iso-27001
  conforms: true
  evidence: "drdroid.io/security — 'ISO 27001: Internationally certified'; trust center at security.drdroid.io"
- id: oauth2
  conforms: true
  evidence: "security.drdroid.io trust-center MCP exposes RFC 8414 oauth-authorization-server metadata (authorization_code, PKCE S256)"
- id: oidc
  conforms: true
  evidence: "security.drdroid.io exposes /.well-known/openid-configuration discovery document"
- id: mcp
  conforms: true
  evidence: "hosted MCP server at aiops.drdroid.io/mcp/ (Streamable HTTP transport) — see mcp/doctor-droid-mcp.yml"
- id: rfc9457-problem-details
  conforms: false
- id: fhir-r4
  conforms: false