generated: '2026-07-19'
method: searched
source: https://trust.heeler.com/ ; https://github.com/heeler-security/heelercli
standards:
- id: soc2-type-ii
  conforms: true
  evidence: SOC 2 Type II certified (stated on heeler.com; Vanta Trust Center at trust.heeler.com)
- id: sarif
  conforms: true
  evidence: heelercli sast/vulnerabilities support `--format sarif` output for code-scanning upload
- id: cyclonedx-sbom
  conforms: true
  evidence: heelercli generates and assesses CycloneDX JSON SBOMs (assess-sbom, download-sbom)
- id: spdx-licenses
  conforms: true
  evidence: heelercli licenses evaluates SPDX license identifiers against an allowed set