generated: '2026-07-20'
method: searched
source: https://withcoral.com/llms.txt
compliance_program:
  published: true
  certifications:
  - ISO 27001:2022
  - GDPR
  data_handling: >-
    Self-hosted; Coral does not ingest, store, or forward customer data, and does not
    use it to train AI models. Zero persistence by default.
  source: https://withcoral.com/llms.txt
standards:
- id: iso-27001-2022
  conforms: true
  evidence: Provider states ISO 27001:2022 certified (llms.txt / data-privacy).
- id: gdpr
  conforms: true
  evidence: Provider states GDPR compliant (llms.txt / data-privacy).
- id: mcp
  conforms: true
  evidence: Ships an MCP server (coral mcp-stdio) and a hosted docs MCP; MCP server-card published.
- id: oauth2
  conforms: true
  evidence: Supports OAuth for source installs, including dynamic client registration (RFC 7591) per CHANGELOG.
- id: rfc9116-security-txt
  conforms: true
  evidence: /.well-known/security.txt present (Contact + Expires).
- id: apache-2.0
  conforms: true
  evidence: Source released under Apache-2.0 (LICENSE).
- id: agent-card-a2a
  conforms: true
  evidence: Publishes /docs/.well-known/agent-card.json (protocolVersion 0.3).
- id: agentskills-discovery
  conforms: true
  evidence: Publishes /docs/.well-known/agent-skills/index.json (agentskills.io 0.2.0).
- id: rfc9457-problem-details
  conforms: false
  evidence: Not an HTTP API; no problem+json error envelope.
- id: fhir-r4
  conforms: false
- id: scim
  conforms: false
  note: Enterprise tier advertises SAML/SCIM for the hosted offering.