generated: '2026-07-21'
method: searched
source: https://docs.taurushq.com/
scope: Taurus platform (PROTECT / CAPITAL / EXPLORER / PRIME)
standards:
  - id: openid-connect
    conforms: true
    evidence: OIDC documented as an SSO identity protocol (docs/introduction-2)
  - id: saml-2.0
    conforms: true
    evidence: SAML documented as an SSO identity protocol (docs/introduction-2)
  - id: scim-2.0
    conforms: true
    evidence: SCIM provisioning documented for automated user/group lifecycle
  - id: fix-protocol
    conforms: true
    evidence: Taurus-PRIME offers FIX protocol trading connectivity (prime/docs/fix-introduction)
  - id: oauth2
    conforms: false
    evidence: API auth is bearer token + HMAC request signing, not a full OAuth2 authorization server
  - id: rfc9457-problem-details
    conforms: false
    evidence: errors use a custom E<NNN>-<NAME> coded scheme, not application/problem+json
  - id: cursor-pagination
    conforms: true
    evidence: cursor.pageRequest / cursor.pageSize / cursor.currentPage documented
  - id: cmta-dacs
    conforms: true
    evidence: "CMTA Digital Assets Custody Standard cited on www.taurushq.com/security"
compliance_programs:
  - ISAE 3402 Type II
  - FIPS 140-2 Level 3
  - CMTA DACS
  - ISO 27001
compliance_source: https://www.taurushq.com/security