generated: '2026-07-19'
method: searched
source: openapi/frameio-v4-openapi.json
standards:
- id: oauth2
  conforms: true
  evidence: OpenAPI securitySchemes declare oauth2 (authorizationCode + clientCredentials
    flows) via Adobe IMS.
- id: oidc
  conforms: true
  evidence: openid/profile/email scopes and Adobe IMS OpenID Connect authorize/token
    endpoints.
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use a JSON:API-style envelope (errors[].source.pointer), not application/problem+json.
- id: json-api-errors
  conforms: true
  evidence: Error member shape mirrors JSON:API (title/detail/source.pointer).
- id: rfc9727-api-catalog
  conforms: true
  evidence: /.well-known/api-catalog served (empty linkset) at next.developer.frame.io.
- id: cursor-pagination
  conforms: true
  evidence: after / page_size cursor parameters across list operations.
- id: soc2
  conforms: true
  evidence: SOC 2 asserted on the Frame.io security/trust page.
- id: iso27001
  conforms: true
  evidence: ISO 27001 asserted on the Frame.io security/trust page.
compliance_programs:
- SOC 2
- ISO 27001
compliance_docs: https://frame.io/security