generated: '2026-10-04'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://www.postman.com/security.md
sources:
- https://www.postman.com/security.md
- https://www.postman.com/security/vulnerability-reporting.md
standards:
- id: gdpr
  conforms: true
  evidence: Trusted by 98% of the Fortune 500, Postman's rigorous security program and adherence to global privacy regulations like GDPR and CCPA
    ensure data security.
- id: ccpa
  conforms: true
  evidence: Trusted by 98% of the Fortune 500, Postman's rigorous security program and adherence to global privacy regulations like GDPR and CCPA
    ensure data security.
- id: soc2
  conforms: true
  evidence: Postman's robust security posture, including end-to-end encryption, granular access controls, comprehensive compliance certifications
    (like SOC 2), and seamless integration with our enterprise identity management (SSO/SCIM), gives us immense confidence.
- id: openapi-3.2
  conforms: true
  evidence: the document declares 3.2.0
- id: oauth2
  conforms: false
  evidence: 'securitySchemes: PostmanApiKey (apiKey), apiKeyAuth (apiKey), basicAuth (http), scimApiKey (apiKey)'
- id: rfc9457
  conforms: false
  evidence: no response declares application/problem+json
- id: idempotency
  conforms: false
  evidence: no idempotency key parameter on mutating operations
- id: pagination
  conforms: true
  evidence: list operations take cursor, limit, offset
docs: https://www.postman.com/security.md