generated: '2026-07-21'
method: searched
source: https://www.tartanhq.com/security
# Cross-cutting / industry standards Tartan publicly claims conformance to.
# No public OpenAPI is accessible (API surface is gated behind the console login),
# so technical-standard conformance (oauth2/rfc9457/etc.) cannot be derived from a spec.
standards:
  - id: iso-27001
    conforms: true
    evidence: certification listed on https://www.tartanhq.com/security
  - id: iso-27701
    conforms: true
    evidence: certification listed on https://www.tartanhq.com/security
  - id: soc2-type-ii
    conforms: true
    evidence: SOC 2 Type II listed on https://www.tartanhq.com/security
  - id: cis-benchmarks-3.0
    conforms: true
    evidence: "CIS 3.0 hardened AWS infrastructure per https://www.tartanhq.com/security"