generated: '2026-07-19'
method: derived
source: openapi/hacware-openapi.yml
note: Derived from the OpenAPI security schemes and payload conventions. HacWare offers a Compliance product
  surface (compliance evidence API) but publishes no third-party certification (SOC 2 / ISO 27001) on
  its public site as of this date, so no Compliance pointer is asserted.
standards:
- id: oauth2
  conforms: false
  evidence: No oauth2 security scheme; auth is a custom appid+secret exchange yielding bearer tokens.
- id: oidc
  conforms: false
- id: http-bearer
  conforms: true
  evidence: 'securitySchemes bearerAuth: type http, scheme bearer'
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use a simple {"message"} envelope, not application/problem+json.
- id: pagination
  conforms: true
  evidence: page_num/page_size query parameters on list endpoints
- id: idempotency
  conforms: false
- id: fhir
  conforms: false
- id: scim
  conforms: false