generated: '2026-07-21'
method: searched
source: https://www.rimsys.io/security-compliance
docs: https://www.rimsys.io/security-compliance
standards:
- id: soc2
  conforms: true
  evidence: 'SOC 2 named on the Rimsys security & compliance page'
- id: iso27001
  conforms: true
  evidence: 'ISO 27001 named on the Rimsys security & compliance page'
- id: gdpr
  conforms: true
  evidence: 'GDPR compliance stated on the Rimsys security & compliance page'
- id: fda-21-cfr-part-11
  conforms: true
  evidence: '21 CFR Part 11 (electronic records/signatures) support stated on the Rimsys security & compliance page'
- id: penetration-testing
  conforms: true
  evidence: 'Regular third-party penetration testing stated on the Rimsys security & compliance page'
- id: oauth2
  conforms: false
  evidence: 'API uses bearer access tokens; no OAuth2 authorization-server flows published'