generated: '2026-07-21'
method: searched
source: https://xpedeon.com/
description: >-
  Standards and compliance posture published by Xpedeon (Algorithms Software
  Pvt Ltd) for its construction ERP cloud platform. Xpedeon publishes no
  public API, so API-level standards (OAuth2, OIDC, RFC 9457, etc.) are not
  assessable. The certifications below are claimed verbatim on the Xpedeon
  homepage: "Scale securely with ISO 27001, 27017, 27018, 27701 and SOC2
  certified cloud". No dedicated trust-center page was found (probed
  trust./security. subdomains and /trust, /security, /compliance paths).
standards:
  - id: iso-27001
    conforms: true
    evidence: 'Homepage claim: "Scale securely with ISO 27001, 27017, 27018, 27701 and SOC2 certified cloud" (https://xpedeon.com/)'
  - id: iso-27017
    conforms: true
    evidence: 'Homepage claim: "Scale securely with ISO 27001, 27017, 27018, 27701 and SOC2 certified cloud" (https://xpedeon.com/)'
  - id: iso-27018
    conforms: true
    evidence: 'Homepage claim: "Scale securely with ISO 27001, 27017, 27018, 27701 and SOC2 certified cloud" (https://xpedeon.com/)'
  - id: iso-27701
    conforms: true
    evidence: 'Homepage claim: "Scale securely with ISO 27001, 27017, 27018, 27701 and SOC2 certified cloud" (https://xpedeon.com/)'
  - id: soc-2
    conforms: true
    evidence: 'Homepage claim: "Scale securely with ISO 27001, 27017, 27018, 27701 and SOC2 certified cloud" (https://xpedeon.com/)'
  - id: oauth2
    conforms: null
    evidence: not assessable — no public API or developer documentation published
  - id: oidc
    conforms: null
    evidence: not assessable — no public API or developer documentation published
  - id: rfc9457-problem-details
    conforms: null
    evidence: not assessable — no public API or developer documentation published