generated: '2026-07-21'
method: derived
source: openapi/*-openapi.json + trust.zededa.com
standards:
- id: openapi-swagger-2.0
  conforms: true
  evidence: 10 published Swagger 2.0 specifications (grpc-gateway generated)
- id: grpc
  conforms: true
  evidence: API surface is grpc-gateway; specs generated from protobuf services
- id: apikey-auth
  conforms: true
  evidence: securityDefinitions BearerToken + ApiKeyAuth (apiKey in header)
- id: oauth2
  conforms: false
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use google.rpc.Status, not application/problem+json
- id: rfc7807
  conforms: false
- id: json-api
  conforms: false
- id: pagination
  conforms: true
  evidence: next.* page/cursor parameters on list operations
- id: idempotency
  conforms: false
  evidence: no idempotency-key header documented
- id: iso-27001
  conforms: true
  evidence: trust.zededa.com lists ISO/IEC 27001
  program: true
- id: hipaa
  conforms: true
  evidence: trust.zededa.com lists HIPAA
  program: true
- id: fedramp
  conforms: true
  evidence: trust.zededa.com lists FedRAMP
  program: true