generated: '2026-07-18'
method: searched
source: https://duplocloud.com/solutions/security-and-compliance/
standards:
  - id: soc2
    conforms: true
    evidence: DuploCloud enforces and documents SOC 2 controls (security & compliance page + trust posture).
  - id: iso27001
    conforms: true
    evidence: ISO 27001 listed among enforced compliance frameworks.
  - id: pci-dss
    conforms: true
    evidence: PCI-DSS listed among enforced compliance frameworks.
  - id: hipaa
    conforms: true
    evidence: HIPAA listed among enforced compliance frameworks.
  - id: hitrust
    conforms: true
    evidence: HITRUST listed among supported compliance frameworks.
  - id: nist
    conforms: true
    evidence: NIST listed among supported compliance frameworks.
  - id: fedramp
    conforms: true
    evidence: FedRAMP listed among supported compliance frameworks.
  - id: gdpr
    conforms: true
    evidence: GDPR listed among supported compliance frameworks.
  - id: oauth2
    conforms: false
    evidence: API auth is HTTP Bearer User Tokens, not OAuth2.
notes: >-
  DuploCloud's core value proposition is helping customers achieve and continuously
  enforce these compliance frameworks in their own cloud accounts; the frameworks above
  reflect the controls the platform implements and audits against.