generated: '2026-07-21'
method: derived
source: openapi/unisson-openapi-original.json + unisson.ai site survey
standards:
- id: openapi-3.1
  conforms: true
  evidence: live document at https://api.unisson.ai/openapi.json declares openapi 3.1.0
- id: http-bearer-auth
  conforms: true
  evidence: single securityScheme HTTPBearer (type http, scheme bearer) applied to 453 of 478 operations
- id: oauth2
  conforms: false
  evidence: no oauth2 securitySchemes in the OpenAPI; bearer token + organization API keys only
- id: oidc
  conforms: false
  evidence: /.well-known/openid-configuration returns 404 on unisson.ai; no openIdConnect scheme in spec
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use FastAPI HTTPValidationError (422) with detail[].loc/msg/type, not application/problem+json
- id: json-api
  conforms: false
  evidence: response schemas are plain JSON models, no JSON:API envelope
- id: scim
  conforms: false
  evidence: no /scim paths; member management is proprietary (/api/v1/organizations/me/members)
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns 404 on www.unisson.ai and api.unisson.ai
- id: soc2
  conforms: true
  evidence: homepage enterprise section states "SOC2 Compliant - all data encrypted at rest and in transit"; trust center at trust.unisson.ai