generated: '2026-08-13'
method: probed
probe: true
url: https://trust.monaco.com
source: https://trust.monaco.com
platform: Vanta Trust Center
certifications: []
certifications_note: >-
  The trust center is served by Vanta and renders entirely client-side; the
  document returned to an unauthenticated HTTP fetch carries only the page shell
  and Open Graph metadata. No named certification (SOC 2, ISO 27001, PCI DSS,
  HIPAA, FedRAMP) was verifiable from the served HTML, and Vanta's trust-page
  data endpoints are not anonymously readable. No `Compliance` pointer is emitted
  in apis.yml until a named certification can be verified — the trust center is
  recorded as present, not as evidence of a specific certification.
linked_from:
- https://www.monaco.com (footer, "Compliance & Trust")
- https://www.monaco.com/security
- https://www.monaco.com/vulnerability-disclosure
evidence:
- source: https://trust.monaco.com
  http_status: 200
  content_type: text/html
  signals: [<title>Monaco Trust Center</title>, 'meta keywords: Trust, Security, Compliance, Automation', assets.vanta.com]
- source: https://trust.monaco.com/api/company
  http_status: 200
  note: Returns the SPA shell, not JSON — no machine-readable trust data.
related:
  vulnerability_disclosure: security/monaco-vulnerability-disclosure.yml
  domain_security: security/monaco-domain-security.yml