generated: '2026-07-21'
method: searched
source:
  - https://startree.ai/
  - https://docs.startree.ai/getting-started
standards:
  - id: soc2
    conforms: true
    evidence: StarTree Cloud enterprise security lists SOC 2 compliance (startree.ai, docs getting-started).
  - id: iso-27001
    conforms: true
    evidence: StarTree Cloud enterprise security lists ISO 27001 (startree.ai).
  - id: hipaa
    conforms: true
    evidence: StarTree Cloud security & compliance documentation lists HIPAA.
  - id: oauth2
    conforms: false
    evidence: Query API uses HTTP Bearer (JWT) tokens, not oauth2 flows.
  - id: rfc9457-problem-details
    conforms: false
    evidence: Published Query API OpenAPI does not declare application/problem+json responses.
  - id: rbac
    conforms: true
    evidence: StarTree Cloud provides role-based access control (RBAC) and SSO.
compliance_program:
  published: true
  certifications:
    - SOC 2
    - ISO 27001
    - HIPAA
  url: https://startree.ai/