generated: '2026-08-04'
method: searched
source: https://www.mastercontrol.com/ai-trust-center/
notes: >-
  MasterControl publishes no anonymous OpenAPI, so no standard below is derived from a
  specification. Every conforms:true entry is a compliance claim MasterControl publishes on its
  own site and that was matched verbatim in the fetched page body. Protocol-level standards
  (OAuth2, OIDC, RFC 9457, JSON:API, OData) are recorded as unknown rather than false, because
  the API reference is tenant-scoped and could not be read.
standards:
- id: iso-9001
  conforms: true
  evidence: 'AI Trust Center: "ISO 9001 - Quality Management"'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: iso-27001
  conforms: true
  evidence: 'AI Trust Center: "ISO 27001 - Information Security"'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: iso-27017
  conforms: true
  evidence: 'AI Trust Center: "ISO 27017 - Cloud Security"'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: iso-27701
  conforms: true
  evidence: 'AI Trust Center: "ISO 27701 - Privacy Information Management"'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: iso-42001
  conforms: true
  evidence: 'AI Trust Center: certified AI Management System (AIMS) under ISO 42001'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: fda-21-cfr-part-11
  conforms: true
  evidence: 'AI Trust Center: platform adheres to 21 CFR Part 11 (electronic records and signatures)'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: eu-mdr
  conforms: true
  evidence: 'AI Trust Center: platform adheres to EU MDR where applicable'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: gdpr
  conforms: true
  evidence: 'AI Trust Center: platform adheres to GDPR where applicable; DPA published at /legal/'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: hipaa
  conforms: true
  evidence: 'AI Trust Center: platform adheres to HIPAA where applicable'
  source: https://www.mastercontrol.com/ai-trust-center/
- id: soc2
  conforms: false
  evidence: no SOC 2 report or attestation is named on the AI Trust Center or any public page
- id: fedramp
  conforms: false
  evidence: >-
    site markets "FedRAMP-ready QMS solutions" for government life sciences; no FedRAMP
    authorization listing was found
- id: oauth2
  conforms: unknown
  evidence: API reference is tenant-scoped; no anonymous securityScheme could be read
- id: oidc
  conforms: unknown
  evidence: no /.well-known/openid-configuration on any MasterControl-controlled host
- id: rfc9457-problem-details
  conforms: unknown
  evidence: no anonymous OpenAPI to inspect for application/problem+json responses
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns 404 on www.mastercontrol.com