generated: '2026-07-21'
method: searched
source: >-
  https://oidc.weaveconnect.com/.well-known/openid-configuration ;
  https://www.getweave.com/security/
standards:
- id: oauth2
  conforms: true
  evidence: >-
    OIDC discovery advertises authorization_code, client_credentials, implicit
    and refresh_token grants with token/authorization/revocation endpoints.
- id: oidc
  conforms: true
  evidence: >-
    Published OpenID Connect discovery document at
    oidc.weaveconnect.com/.well-known/openid-configuration (issuer, jwks_uri,
    userinfo, id_token RS256).
- id: pkce-rfc7636
  conforms: true
  evidence: code_challenge_methods_supported includes S256.
- id: rfc9116-security-txt
  conforms: true
  evidence: /.well-known/security.txt published on www.getweave.com.
- id: hipaa
  conforms: true
  evidence: HIPAA compliance stated on https://www.getweave.com/security/.
- id: iso-27001
  conforms: true
  evidence: ISO 27001 certification stated on https://www.getweave.com/security/.
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type 2 assessment stated on https://www.getweave.com/security/.
- id: rfc9457-problem-details
  conforms: false
  evidence: No public OpenAPI published; error envelope not verifiable.
- id: fhir
  conforms: false
- id: scim
  conforms: false