generated: '2026-07-21'
method: searched
source: https://docs.ryft.io/administration/security-and-privacy
standards:
  - id: soc2-type-ii
    conforms: true
    evidence: "Ryft is SOC2 (Type II) compliant (security-and-privacy docs; reports on request)."
  - id: iso-27001
    conforms: true
    evidence: "Ryft is ISO-27001 compliant (security-and-privacy docs)."
  - id: gdpr
    conforms: true
    evidence: "Ryft is GDPR compliant; supports DPAs; Compliance Cleanup for GDPR/CCPA erasure."
  - id: ccpa
    conforms: true
    evidence: "Compliance Cleanup ensures physical removal of deleted Iceberg data for CCPA."
  - id: oauth2
    conforms: true
    evidence: "app.ryft.io publishes RFC 8414 oauth-authorization-server metadata (Auth0)."
  - id: oidc
    conforms: true
    evidence: "Okta OIDC organization SSO; Auth0 OIDC identity."
  - id: rfc8414-oauth-authorization-server-metadata
    conforms: true
    evidence: well-known/ryft-oauth-authorization-server.json
  - id: apache-iceberg-rest-catalog
    conforms: true
    evidence: "Integrates via the Iceberg REST Catalog / REST API (Polaris, OneLake, etc.)."
  - id: rfc7591-dynamic-client-registration
    conforms: true
    evidence: "registration_endpoint present in oauth-authorization-server metadata."
  - id: rfc9457-problem-details
    conforms: false