generated: '2026-07-21'
method: derived
source: openapi/sigma-ratings-openapi-original.json
standards:
- id: openapi-3.1
  conforms: true
  evidence: openapi 3.1.0 document published at docs.sigma360.com/api
- id: apikey-auth
  conforms: true
  evidence: securitySchemes.apiKey (Authorization header)
- id: oauth2
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: error responses are text/plain, not application/problem+json
- id: webhooks
  conforms: true
  evidence: OpenAPI 3.1 top-level webhooks object with 4 events
- id: cursor-pagination
  conforms: true
  evidence: cursor/page/pageSize/sortBy/sortOrder query params
- id: soc2-type-ii
  conforms: true
  evidence: SOC 2 Type II per sigma360.com and trust.sigma360.com (Vanta trust center)
- id: gdpr
  conforms: true
  evidence: GDPR compliance stated on sigma360.com