generated: '2026-07-21'
method: searched
source: https://api.supermetrics.com/.well-known/openid-configuration, https://trust.supermetrics.com/
standards:
- {id: oauth2, conforms: true, evidence: 'oauth-authorization-server metadata advertises authorization_code + refresh_token grants'}
- {id: oidc, conforms: true, evidence: 'openid-configuration published; id_token RS256; userinfo + jwks endpoints'}
- {id: oauth2-pkce, conforms: true, evidence: 'code_challenge_methods_supported: [S256]'}
- {id: rfc8414-oauth-metadata, conforms: true, evidence: /.well-known/oauth-authorization-server served}
- {id: rfc7591-dynamic-client-registration, conforms: true, evidence: 'registration_endpoint present; client_id_metadata_document_supported: true'}
- {id: rfc9116-security-txt, conforms: true, evidence: /.well-known/security.txt served on supermetrics.com}
- {id: rfc9457-problem-details, conforms: false, evidence: 'custom JSON error envelope (meta/error/links), not application/problem+json'}
- {id: soc2, conforms: true, evidence: 'SOC 2 named on trust.supermetrics.com'}
- {id: iso27001, conforms: true, evidence: 'ISO/IEC 27001 named on trust.supermetrics.com'}
- {id: gdpr, conforms: true, evidence: 'GDPR / DPA documented; trust center'}
compliance_program:
  url: https://trust.supermetrics.com/
  certifications: [SOC 2, ISO 27001, GDPR]