generated: '2026-08-14' method: searched source: https://pitchme.co/integrations docs: https://pitchme.co/solutions note: >- PitchMe publishes named compliance claims as trust badges on its marketing pages — "GDPR Compliant", "SOC 2 Type", "ISO 27001", plus a written commitment to "full compliance indemnification — GDPR, CCPA, and sector-specific requirements". These are the provider's own published statements and are recorded as such. There is no trust center, no security page, no published audit report or certificate, and no mechanism to request one anonymously — probe-security-programs.py found neither a vulnerability-disclosure program nor a trust center on any PitchMe host. There is also no public API contract, so none of the API-level standards below could be derived from a specification; each is recorded as unknown rather than false where no evidence exists in either direction. standards: - id: gdpr conforms: true evidence: '"GDPR Compliant" badge on pitchme.co/ and pitchme.co/integrations; "Fully-GDPR compliant" on pitchme.co/solutions' - id: soc2 conforms: true evidence: '"SOC 2 Type" badge on pitchme.co/ and pitchme.co/integrations; "SOC 2 certified, ready for client audits" on pitchme.co/solutions' caveat: 'The badge does not state Type I or Type II, and no report or trust center is published' - id: iso-27001 conforms: true evidence: '"ISO 27001" badge on pitchme.co/ and pitchme.co/integrations' caveat: 'No certificate number, certification body, or scope statement is published' - id: ccpa conforms: true evidence: '"PitchMe provides full compliance indemnification — GDPR, CCPA, and sector-specific requirements covered" on pitchme.co/integrations' - id: oauth2 conforms: unknown evidence: 'no public API contract or authentication documentation is published' - id: oidc conforms: unknown evidence: '/.well-known/openid-configuration returned 404 on pitchme.co and api.pitchme.co' - id: rfc9457-problem-details conforms: unknown evidence: 'no public API contract; error envelope is not documented' - id: rfc9116-security-txt conforms: false evidence: '/.well-known/security.txt returned 404 on every PitchMe host'