generated: '2026-07-19'
method: searched
source: https://docs.falconfs.com/docs/certifications
docs:
  - https://docs.falconfs.com/docs/certifications
  - https://falconfs.com/
standards:
  - id: pci-dss
    conforms: true
    evidence: Falcon is certified PCI DSS compliant (certifications page and site footer).
  - id: iso-27001
    conforms: true
    version: '2022'
    evidence: Falcon is ISO/IEC 27001:2022 certified (certifications page).
  - id: soc2
    conforms: true
    evidence: Falcon is AICPA SOC 2 certified (certifications page and site).
  - id: oauth2
    conforms: false
    evidence: >-
      Auth is a client-id/secret login minting a JWT bearer token (Keycloak-backed), not a
      public OAuth2 authorization/scope surface.
  - id: jwt-bearer
    conforms: true
    evidence: Access tokens are JWTs presented as HTTP bearer Authorization headers.
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors are signalled via HTTP status codes; no application/problem+json documented.
compliance_program:
  certifications: [PCI DSS, ISO 27001:2022, SOC 2]
  published_at: https://docs.falconfs.com/docs/certifications