generated: '2026-07-19' method: searched probe: false source: https://www.formality.com/en/security url: https://www.formality.com/en/security certifications: - SOC 2 Type II - ISO 27001 - GDPR notes: >- Formality publishes a security & compliance page stating ISO 27001 and SOC 2 Type II certifications are held and renewed annually, and that it operates as a GDPR-compliant data processor. AI agents are stated to run in a secure perimeter with full auditability and no customer data used to train models. Compliant hosting is offered in the customer's chosen location. No dedicated trust-portal subdomain (trust.formality.com) or automated evidence-sharing center was found; claims are published on the marketing security page. The site is a JavaScript (Framer) app, so the automated curl probe did not surface these keywords. evidence: - source: https://www.formality.com/en/security keywords: [soc 2 type ii, iso 27001, gdpr, auditability]