generated: '2026-07-20'
method: searched
source: https://api-docs.logik.io/, https://www.logik.io/security-iso
standards:
  - id: oauth2
    conforms: false
    evidence: No oauth2 securityScheme in any spec; auth is http bearer (opaque API keys).
  - id: openid-connect
    conforms: false
  - id: http-bearer
    conforms: true
    evidence: All four specs declare http/bearer securitySchemes (Runtime + Admin tokens).
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use a custom { errorMessage, timestamp } envelope, not application/problem+json.
  - id: pagination
    conforms: true
    evidence: Managed Table endpoints expose page/limit/sort with Spring Pageable/Sort response metadata.
  - id: idempotency
    conforms: false
    evidence: No Idempotency-Key contract documented.
  - id: openapi-3.0
    conforms: true
    evidence: Runtime and Admin specs published as OpenAPI 3.0.1/3.0.3.
  - id: iso-27001
    conforms: true
    evidence: Logik.io publishes ISO/IEC 27001 certification (security-iso page).
  - id: gdpr
    conforms: true
    evidence: ISO 27001 program stated to align with GDPR, HIPAA and CCPA requirements.
  - id: soc2
    conforms: false
    evidence: No SOC 2 report found published (ISO 27001 is the named certification).
compliance:
  certifications:
    - ISO/IEC 27001
  regulatory_alignment:
    - GDPR
    - HIPAA
    - CCPA
  source: https://www.logik.io/security-iso
  note: security-iso page now 301-redirects to servicenow.com post-acquisition; ISO 27001 is Logik.io's published certification.