generated: '2026-07-21'
method: searched
source: https://sprout.ai/data-privacy-security/
notes: >-
  Compliance posture asserted from Sprout.ai's published Data, Privacy & Security
  page. No public OpenAPI is available, so protocol-level conformance (oauth2,
  oidc, rfc9457, etc.) cannot be derived — only the published organizational /
  compliance certifications are recorded here.
standards:
- id: iso-27001
  conforms: true
  evidence: ISO 27001 certified (2022 standard, recertified September 2025)
- id: iso-27018
  conforms: true
  evidence: ISO 27018 certified (cloud PII protection)
- id: soc-2
  conforms: true
  evidence: SOC 2 (SSAE 16) reported
- id: pci-dss
  conforms: true
  evidence: PCI DSS listed on Data, Privacy & Security page
- id: fedramp
  conforms: true
  evidence: FedRAMP listed on Data, Privacy & Security page
- id: hipaa
  conforms: true
  evidence: HIPAA listed on Data, Privacy & Security page
- id: gdpr
  conforms: true
  evidence: GDPR compliance program with appointed Data Protection Officers