generated: '2026-07-21'
method: searched
source: https://www.spektr.com/trust
standards:
- id: api-key-auth
  conforms: true
  evidence: openapi securityScheme type apiKey (x-api-key header)
- id: oauth2
  conforms: false
  evidence: no oauth2 securityScheme declared
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use a flat message/errorCode JSON envelope, not application/problem+json
- id: idempotency
  conforms: true
  evidence: idempotency-key header with 24h retention and 422-on-mismatch semantics
- id: webhook-hmac-signing
  conforms: true
  evidence: HMAC-signed webhook deliveries with per-workspace secret
- id: soc2-type-ii
  conforms: true
  evidence: SOC 2 Type II attestation (trust page)
- id: iso-27001
  conforms: true
  evidence: ISO 27001:2022 certified (trust page)
- id: iso-27701
  conforms: true
  evidence: ISO 27701:2019 (PIMS) certified (trust page)
- id: iso-42001
  conforms: true
  evidence: ISO/IEC 42001:2023 AI governance certified (trust page)
- id: gdpr
  conforms: true
  evidence: GDPR compliant (trust page)