generated: '2026-07-19'
method: searched
source: https://developers.innerspace.io/ + https://innerspace.io/trust
standards:
- id: oauth2
  conforms: true
  evidence: Auth uses an OAuth 2.0 client-credentials exchange at /v2/oauth/token
    (returns a session token).
- id: graphql
  conforms: true
  evidence: v2 API is GraphQL; errors returned in a GraphQL errors[] array with extensions.code.
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use the GraphQL error envelope, not application/problem+json.
- id: soc2
  conforms: true
  evidence: SOC 2 attested per the InnerSpace Trust Center (Drata) and /trust page.
- id: iso-27001
  conforms: true
  evidence: ISO 27001 certified per the InnerSpace Trust Center and /trust page.
- id: gdpr
  conforms: true
  evidence: GDPR compliance stated on the InnerSpace /trust page.
- id: hipaa
  conforms: false
  evidence: Not listed among published certifications.
compliance_program: https://innerspace.io/trust