generated: '2026-07-21'
method: searched
source: https://trust.testsigma.com/
standards:
  - id: bearer-token-auth
    conforms: true
    evidence: REST API requires Authorization Bearer API Key header.
  - id: oauth2
    conforms: false
    evidence: No OAuth2 flows documented for the public REST API.
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors are signaled via HTTP status and body result/status fields, not problem+json.
  - id: soc2
    conforms: true
    evidence: SOC 2 listed on trust.testsigma.com.
  - id: iso-27001
    conforms: true
    evidence: ISO 27001 listed on trust.testsigma.com.
  - id: hipaa
    conforms: true
    evidence: HIPAA listed on trust.testsigma.com.
  - id: gdpr
    conforms: true
    evidence: GDPR listed on trust.testsigma.com.
  - id: csa-star
    conforms: true
    evidence: CSA STAR listed on trust.testsigma.com.
compliance_page: https://trust.testsigma.com/