generated: '2026-08-26'
method: searched
source: https://trust.plotly.com/ and https://plotly.com/security/
trust_center:
  url: https://trust.plotly.com/
  status: 200
  platform: Anecdotes
  platform_evidence: 'og:title meta tag reads "Trust Center | Powered by Anecdotes"'
  machine_readable: false
  note: >-
    trust.plotly.com returns HTTP 200 but the body is an Angular single-page-app shell
    (apps/trustcenter/main.*.js); no certification content is present in the served HTML, so an
    agent or crawler reading the page gets a title and nothing else. The certifications recorded
    below are therefore sourced from https://plotly.com/security/ and https://plotly.com/pricing/,
    which state them in server-rendered text.
certifications:
- name: SOC 2 Type I
  source: https://plotly.com/security/
  statement: Our organization is also SOC 2 Type I and II compliant.
- name: SOC 2 Type II
  source: https://plotly.com/security/
- name: ISO/IEC 27001
  source: https://plotly.com/security/
  also_listed: https://plotly.com/pricing/ (Enterprise tier)
- name: ISO/IEC 27701
  source: https://plotly.com/security/
  also_listed: https://plotly.com/pricing/ (Enterprise tier)
  scope: Privacy information management
- name: ISO/IEC 42001
  source: https://plotly.com/security/
  also_listed: https://plotly.com/pricing/ (Enterprise tier)
  scope: AI management system
infrastructure_accreditations:
  provider: AWS
  note: >-
    Inherited from the hosting provider and listed as such on Plotly's security page, not earned
    by Plotly - recorded separately so they are not double-counted as Plotly certifications.
  items:
  - SOC 1 / SOC 2 / SSAE 16 / ISAE 3402
  - ISO 27001
  - PCI DSS Level 1
  - FISMA Moderate
  - Sarbanes-Oxley (SOX)
data_practices:
  hosting: AWS
  telemetry: Limited telemetry collected for service improvement
  retention: Based on legal obligations and business interests
security_contact: security@plotly.com
x-evidence:
- url: https://trust.plotly.com/
  http_status: 200
  fetched: '2026-08-26'
- url: https://plotly.com/security/
  http_status: 200
  fetched: '2026-08-26'
- url: https://plotly.com/pricing/
  http_status: 200
  fetched: '2026-08-26'