generated: '2026-07-19'
method: derived
source: openapi/*.json + https://www.fairmarkit.com/security-compliance
standards:
- id: openapi-3.1
  conforms: true
  evidence: Both APIs published as OpenAPI 3.1.1
- id: rest
  conforms: true
  evidence: Resource-oriented URLs, standard HTTP verbs/status codes
- id: api-key-auth
  conforms: true
  evidence: X-FM-API-KEY header on all operations
- id: oauth2
  conforms: false
  evidence: No oauth2 securityScheme; API-key only
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use plain JSON, not application/problem+json
- id: limit-offset-pagination
  conforms: true
  evidence: limit/offset query parameters
- id: idempotency
  conforms: false
  evidence: No Idempotency-Key contract documented
- id: soc2
  conforms: true
  evidence: SOC 2 Compliant badge on /security-compliance
- id: iso-27001
  conforms: true
  evidence: ISO 27001 Certified badge on /security-compliance