generated: '2026-07-21'
method: searched
source: https://trufflesecurity.com/pricing
notes: >-
  Truffle Security does not publish a public REST OpenAPI, so most API-level conformance is not
  assessable. The claims below are from the Enterprise product pages. No named compliance
  certifications (SOC 2, ISO 27001, PCI, HIPAA, FedRAMP) were found published, so no Compliance
  pointer is emitted.
standards:
- id: saml-2.0
  conforms: true
  evidence: "Enterprise single sign-on documented as 'SAML 2.0 or OAuth 2.0' on pricing page"
- id: oauth2
  conforms: true
  evidence: "Enterprise single sign-on documented as 'SAML 2.0 or OAuth 2.0' on pricing page"
- id: rbac
  conforms: true
  evidence: "Enterprise offering lists role-based access control"
- id: soc2
  conforms: false
  evidence: no SOC 2 certification found published
- id: iso-27001
  conforms: false
  evidence: no ISO 27001 certification found published