generated: '2026-07-19'
method: searched
source: openapi/genesys-platform-api-openapi-original.json + https://www.genesys.com/trust-center/compliance
standards:
- id: oauth2
  conforms: true
  evidence: securityDefinitions declare oauth2 (PureCloud OAuth); published RFC 8414 authorization-server metadata at login.mypurecloud.com
- id: rfc8414-oauth-metadata
  conforms: true
  evidence: /.well-known/oauth-authorization-server returns 200 with issuer/endpoints/grant_types
- id: pkce
  conforms: true
  evidence: authorization-server metadata advertises code_challenge_methods_supported S256
- id: rfc9116-security-txt
  conforms: true
  evidence: /.well-known/security.txt served at login.mypurecloud.com
- id: openapi-swagger2
  conforms: true
  evidence: public Swagger 2.0 definition with 2139 paths / 3180 operations
- id: rfc9457-problem-details
  conforms: false
  evidence: error responses are documented but not served as application/problem+json
- id: soc2-type2
  conforms: true
  evidence: Genesys Trust Center lists SOC 1 Type 2 and SOC 2 Type 2
- id: iso-27001
  conforms: true
  evidence: Genesys Trust Center lists ISO 27001:2022 (plus 27017, 27018, 42001)
- id: pci-dss
  conforms: true
  evidence: Genesys Trust Center lists PCI DSS
- id: hipaa
  conforms: true
  evidence: Genesys Trust Center lists HIPAA / HITRUST (Americas)
- id: fedramp
  conforms: true
  evidence: Genesys Cloud publishes FedRAMP authorization posture
- id: gdpr
  conforms: true
  evidence: Genesys Trust Center lists GDPR / CCPA / LGPD