generated: '2026-07-21'
method: searched
source: >-
  https://docs.starkbank.com/llms.txt (compliance row) +
  openapi/stark-bank-openapi-original.yml
standards:
- id: oauth2
  conforms: false
  evidence: no oauth2 securityScheme; auth is ECDSA request signing
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: >-
    errors use a custom envelope {errors:[{code,message}]} with string codes,
    not application/problem+json
- id: cursor-pagination
  conforms: true
  evidence: list operations return a cursor field; max 100 items per page
- id: idempotency
  conforms: true
  evidence: externalId on write operations makes retries non-duplicating
- id: pix
  conforms: true
  evidence: Banco Central do Brasil Pix arrangement participant (Bacen Pix Grade A)
- id: pci-dss
  conforms: true
  evidence: PCI DSS 4.0.1 (published in docs compliance row)
- id: soc2
  conforms: true
  evidence: SOC 2 (published in docs compliance row)
- id: iso-27001
  conforms: true
  evidence: ISO 27001 (published in docs compliance row)
compliance_program:
  certifications:
  - PCI DSS 4.0.1
  - SOC 2
  - ISO 27001
  - Bacen Pix Grade A
  sla_uptime_target: 99.99%
  source: https://docs.starkbank.com/index.md#compliance