generated: '2026-07-21'
method: searched
source: https://www.valence.co/trust-and-security
standards:
  - id: saml-sso
    conforms: true
    evidence: valence.co/trust-and-security lists SAML-based SSO for enterprise sign-in
  - id: scim
    conforms: true
    evidence: valence.co/trust-and-security lists SCIM provisioning for user lifecycle management
  - id: soc2-type2
    conforms: true
    evidence: valence.co/trust-and-security states SOC 2 Type 2 certification; Vanta trust center at trust.valence.co
  - id: iso-27001
    conforms: true
    evidence: valence.co/trust-and-security states ISO 27001 certification
  - id: iso-42001
    conforms: true
    evidence: valence.co/trust-and-security states ISO 42001 (responsible AI management) certification
  - id: gdpr
    conforms: true
    evidence: valence.co/trust-and-security states GDPR compliance with US or EU data residency
  - id: eu-ai-act
    conforms: true
    evidence: valence.co/trust-and-security states EU AI Act adherence
notes: >-
  Valence publishes no public API, so no API-level standards (OAuth2, OIDC,
  JSON:API, RFC 9457) can be asserted. The standards above are platform-level
  conformance claims published on the provider's trust page. SCIM provisioning
  implies a partner/enterprise identity integration surface, but no SCIM
  endpoint or documentation is publicly published.