generated: '2026-07-20'
method: searched
source: https://trust.pointfive.co/
standards:
- id: oauth2
  conforms: true
  evidence: MCP server publishes OAuth 2.1 authorization-server metadata (well-known/pointfive-oauth-authorization-server.json)
- id: oauth2.1-pkce
  conforms: true
  evidence: code_challenge_methods_supported includes S256
- id: mcp
  conforms: true
  evidence: Published Model Context Protocol server over SSE at https://mcp.pointfive.co/sse
- id: oidc
  conforms: false
  evidence: /.well-known/openid-configuration returns 404 on the MCP host
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type II listed on https://trust.pointfive.co/
- id: iso-27001
  conforms: true
  evidence: ISO 27001 listed on https://trust.pointfive.co/
- id: iso-27017
  conforms: true
  evidence: ISO 27017 listed on https://trust.pointfive.co/
- id: iso-27018
  conforms: true
  evidence: ISO 27018 listed on https://trust.pointfive.co/
- id: focus
  conforms: true
  evidence: FinOps FOCUS billing-data support documented on the MCP page (coming soon)
compliance_program:
  url: https://trust.pointfive.co/
  certifications: [SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018]