generated: '2026-08-26'
method: searched
source: https://www.rainfocus.com/privacy-security/
description: >-
  RainFocus has no dedicated trust-center product page. Its Privacy and Security hub at
  /privacy-security/ is the equivalent surface: it names the certifications and links every legal
  and security document. A host at trust.rainfocus.com exists and resolves but sits behind a
  Cloudflare interstitial ("Just a moment...") that this crawler could not clear, so its contents
  were not read and nothing is asserted about it.
trust_center:
  url: https://www.rainfocus.com/privacy-security/
  dedicated_product: false
  subdomain:
    host: https://trust.rainfocus.com/
    status: 403
    note: Cloudflare managed-challenge interstitial; not confirmed dead, not read.
certifications:
- name: SOC 2 (AICPA SOC)
  claimed: true
  detail: Stated as "AICPA SOC Certified" on the vulnerability disclosure and privacy/security pages.
  report_available: unknown
- name: ISO/IEC 27001:2022
  claimed: true
  detail: >-
    "RainFocus is ISO/IEC 27001:2022 certified and is audited annually." The vulnerability
    disclosure page carries a typo rendering it as "ISO/IEC 26001"; the privacy and security hub
    states 27001:2022, which is the correct standard for an information security management system.
  report_available: unknown
- name: PCI DSS
  claimed: true
  detail: Listed as compliant on the privacy and security hub.
  report_available: unknown
regulatory_compliance:
- GDPR
- CCPA
security_practices_published:
- encryption at rest and in transit, with additional layers for sensitive data
- annual third-party ISO 27001 audit
- named subprocessor list
- published data retention policy
documents:
- name: Privacy Policy
  url: https://www.rainfocus.com/privacy-policy/
  status: 200
- name: Terms of Use
  url: https://www.rainfocus.com/privacy-security/terms-of-use/
  status: 200
- name: API and MCP Tools Terms and Conditions
  url: https://www.rainfocus.com/privacy-security/api-terms-and-conditions/
  status: 200
- name: Subprocessors
  url: https://www.rainfocus.com/privacy-security/subprocessors/
  status: 200
- name: Data Retention Policy
  url: https://www.rainfocus.com/privacy-security/data-retention-policy/
  status: 200
- name: Vulnerability Disclosure Program
  url: https://www.rainfocus.com/privacy-security/vulnerability-disclosure/
  status: 200
- name: Base Terms
  url: https://www.rainfocus.com/legal/base-terms/
  status: 200
not_claimed:
- HIPAA
- FedRAMP
- TX-RAMP
- StateRAMP