Security and compliance
SAML SSO, SCIM provisioning, MFA, audit logging, and whether a provider can be self-hosted — spanning auth, secrets management and observability, wherever a provider actually documents one of these. Every figure is sourced; a blank cell means undocumented, not "no."
Identity and access
| Provider | Category | SAML SSO | SCIM | MFA | Audit logs | Self-hostable |
|---|---|---|---|---|---|---|
| Algolia | Search | — | — | — | Not documented | Not supported |
| Amazon OpenSearch Service | Search | — | — | — | Not documented | Supported |
| Apollo GraphOS | GraphQL federation | — | — | — | Not documented | Supported |
| Archbee | Developer documentation platforms | Limited — SAML and OIDC SSO on the Enterprise plan only. | — | — | Not documented | Limited — Archbee-operated in the customer's AWS account; custom Enterprise contracts only. |
| Auth0 | Authentication | Supported | Supported | Supported | Audit log streaming to Datadog, Splunk, AWS and Azure, from the Essentials plan up. Auth0 publishes no retention window on the pricing page. | Not supported — Documented options are the multi-tenant Public Cloud and Auth0-managed Private Cloud on AWS or Azure. |
| AWS Secrets Manager | Secrets management | — | — | — | AWS CloudTrail records every Secrets Manager API call as an event; the last 90 days are viewable in the CloudTrail console, longer retention by creating a trail that delivers to S3. | — |
| Axiom | Error tracking and observability | — | — | — | Every access and configuration change is recorded to an immutable audit trail you can query in APL like any other dataset. | Limited — Docs FAQ names a Bring Your Own Cloud plan; the deployment answer on the same page describes only managed Axiom Cloud. |
| Better Auth | Authentication | Supported | Supported | Supported | 10,000 audit log events a month with 1-day retention on the free Starter plan; 20,000 on Pro, then $0.0001 per event. | Supported |
| Better Stack | Error tracking and observability | — | — | — | Not documented | Not supported — SaaS only; same page lists Better Stack data ownership as "SaaS-hosted (optional S3 bucket)". |
| BorgBase | Backup and DR | — | — | Supported | Not documented | — |
| Bump.sh | Developer documentation platforms | Limited — Custom plans only; SSO runs on WorkOS | — | — | Not documented | Not supported — Cloud-only; the Custom plan adds an on-premise MCP dataplane, not a docs host |
| Clerk | Authentication | Supported | Supported | Supported | Application logs with 1-day retention on the free Hobby plan; longer retention is a paid-plan feature Clerk lists without publishing the window. | — |
| Confluent Cloud | Event streaming | — | — | — | Audit logs arrive on Standard, the first paid tier above Basic. | — |
| Cool Analytics | Web analytics | — | — | — | Not documented | Not supported |
| DataBull | Web analytics | — | — | — | Not documented | Supported |
| Datadog | Error tracking and observability | — | — | — | Datadog Audit Trail helps customers monitor user and system activity within their organization, including who performed an action, what action was taken, and relevant context about the activity. | Limited — BYOC Logs runs the log engine in your own environment; Datadog hosts the UI, pipeline config and query routing. |
| Directus | Data API layers | — | — | — | Not documented | Supported |
| Doppler | Secrets management | — | — | — | 3 days of activity log retention on Developer (free), 90 days on Team, custom retention on Enterprise. | — |
| DreamFactory | Data API layers | — | — | — | Not documented | Supported |
| Elastic Cloud | Error tracking and observability | — | — | — | Not documented | Supported |
| Estuary Flow | ETL and data pipelines | Limited | — | — | Not documented | — |
| Fern | Developer documentation platforms | Limited — Enterprise plan only; SAML 2.0 or OIDC sign-in to gated docs | — | — | Not documented | Limited — Enterprise plan only |
| Flagsmith | Feature flags | — | — | — | Not documented | Supported |
| Fumadocs | Developer documentation platforms | — | — | — | Not documented | Supported |
| GitBook | Developer documentation platforms | Limited — Enterprise plan only; for team members signing in to the app | — | — | Not documented | Limited — Published docs site only, and unsupported by GitBook |
| GlitchTip | Error tracking and observability | — | — | — | Not documented | Supported |
| GoatCounter | Web analytics | — | — | — | Not documented | Supported |
| Grafana Cloud | Error tracking and observability | — | — | — | Not documented | Supported |
| Grafbase | GraphQL federation | — | — | — | Not documented | Supported |
| Hasura | Data API layers | — | — | — | Not documented | Supported |
| HCP Terraform | Infrastructure as code | Supported — SAML 2.0, both SP- and IdP-initiated, with just-in-time provisioning | — | — | Yes, on the Standard and Premium editions, with 14 days of retention, read through a dedicated Audit Trails API that needs an organisation or audit trail token rather than a user token. The documentation disagrees with itself on the tier: the audit trails reference says Standard and Premium, while the plan-management page lists audit logging among Premium-only features. Recorded as the audit page states it. Not available on self-hosted Terraform Enterprise. | Supported — As Terraform Enterprise, a separate self-hosted distribution of the same application |
| Hevo Data | ETL and data pipelines | Limited | — | — | Not documented | — |
| IDrive e2 | Object storage | — | — | — | IDrive provides controlled access, encryption, and audit logging for sensitive data. | — |
| ImageKit | Image and video optimization | — | — | — | Folder-level path policies, audit logs, role-based access controls, and AI-powered moderation ensure your media stays compliant and organized at scale. | — |
| Infisical | Secrets management | — | — | — | None on Free. 30-day retention on Pro, 90-day on Advanced, custom retention on Enterprise. | — |
| Kinde | Authentication | Supported | — | Supported | Kinde includes enterprise SSO, RBAC, advanced security, custom domains, audit logs, and compliance features on higher plans. | — |
| Meilisearch | Search | — | — | — | API access and config audit trail, plus role-based access and tenant isolation. | Supported |
| Mintlify | Developer documentation platforms | Limited — Enterprise plans only; covers sign-in to the Mintlify dashboard | — | — | Not documented | Limited — Enterprise plan only; each deployment is a scoped engagement with the account team |
| Modal | Model hosting and inference | — | — | — | Per Enterprise contract (see Audit logs ) | — |
| NetBird | Zero-trust network access | — | Supported | Supported | Not documented | Supported |
| OpenObserve | Error tracking and observability | — | — | — | Not documented | Supported |
| OpenTofu | Infrastructure as code | Not supported — No account and no directory to federate with; access control is your own CI and state backend | — | — | None, and there cannot be: OpenTofu is a binary you run, with no account, no hosted state and no service to keep a trail of. What a platform sells is partly this. | Supported |
| Piqo | Web analytics | — | — | — | Not documented | Supported — Paid one-time license; the page does not call it open source |
| PlanetScale | Managed databases | — | — | — | In addition to the audit log feature available to all PlanetScale plans, Enterprise plans can use our EventBridge configuration to send logs to your AWS account. | — |
| Portable | ETL and data pipelines | — | — | Supported | Not documented | — |
| Pulumi | Infrastructure as code | Supported — SAML/SSO with RBAC, on Enterprise; SCIM sync on the tier above | — | — | Supported — Enterprise tier, above the $40/month Team plan | Supported — Listed as a line item on the plan comparison, not a separate product |
| Qdrant | Vector databases | — | — | — | Audit logging, available on paid clusters, captures operations performed through the Qdrant API, including user and API key attribution, timestamp, target collection, and result of the action. | — |
| Railway | Application platforms | — | — | — | Audit Logging is listed under Product Security, and Data Access Logging under Access Control. Neither is described further and no retention period is given. | — |
| ReadMe | Developer documentation platforms | Limited — Enterprise plan only; covers teammate sign-in to ReadMe | — | — | Not documented | — |
| Redocly | Developer documentation platforms | — | — | — | Not documented | Limited — Open-source Redoc CE self-hosts the API reference; no self-hosting of the full platform is described |
| Redpanda | Event streaming | Limited | — | — | Audit logging arrives on Bring Your Own Cloud. Serverless lists Kafka ACLs and SSO with Google or GitHub and no audit trail. | — |
| Render | Application platforms | — | — | — | Built-in audit logging and monitoring for platform events. | — |
| Rootly | Incident management and on-call | — | — | — | An audit trail that's ready before anyone asks. | — |
| Scalar | Developer documentation platforms | Supported — Business and Enterprise plans; not on Free or Pro. | — | — | Not documented | Limited — MIT-licensed core only; no page says the hosted Docs platform itself can be self-hosted. |
| Scalr | Infrastructure as code | — | — | — | Not stated on the pricing page. Scalr lists drift detection, policy enforcement and the module and provider registries among its core features and does not mention an audit trail there. | Limited — Self-hosted agents, unlimited on both plans; the control plane is Scalr's |
| Seline | Web analytics | — | — | — | Not documented | Not supported |
| Sentry | Error tracking and observability | — | — | — | In the audit log, all of the actions by user and event within the Sentry UI (e.g., member.invite, project.create) are listed chronologically by time and IP address so you’ll always have a view into your organization’s most recent history. | Limited |
| SigNoz | Error tracking and observability | — | — | — | Not documented | Supported |
| Spacelift | Infrastructure as code | Supported — SAML 2.0 and OIDC, from the Business tier | — | — | Supported — In the Business tier, alongside 5-30 private workers | — |
| Statsig | Feature flags | — | — | — | Comprehensive cloud audit logging | — |
| Stoplight | Developer documentation platforms | Supported — Pro Team and Enterprise plans. | — | — | Not documented | — |
| Stripe | Payments | — | — | — | You can also view audit logs of important account changes and activity in your security history . | — |
| Stytch | Authentication | Supported | Supported | Supported | Event logs cover API requests and dashboard admin actions, are visible in the Dashboard and retained 30 days; longer retention means streaming to Datadog Logs or Grafana Loki, the only supported destinations. | — |
| SuperTokens | Authentication | — | Not supported — Not shipped; the post shows how to build SCIM endpoints on top of SuperTokens yourself. | Supported | Not documented | Supported |
| Tailscale | Zero-trust network access | — | Supported | — | Not documented | — |
| Traks | Web analytics | — | — | — | Not documented | Supported |
| Twingate | Zero-trust network access | — | — | Limited | Not documented | — |
| Typesense | Search | — | — | — | Not documented | Supported |
| Umami | Web analytics | — | — | — | Not documented | Supported |
| Unleash | Feature flags | — | — | — | Unleash is SOC 2 Type II and GDPR compliant to meet the requirement of the world's largest enterprises, with SSO support (SAML 2.0, OpenID Connect, Okta, Azure AD), granular role-based access control, change request workflows with four-eyes approvals, and audit logs with up to two years of retention. | Supported |
| Vantage | Cloud cost management | Supported | — | — | Not documented | — |
| WorkOS | Authentication | Supported | Supported | Supported | Billed rather than bundled: $125 per month per SIEM connection for log streaming, plus $99 per month per million events stored. | Not supported — WorkOS on-prem guide covers your app running on-prem and still calling the WorkOS cloud API |
| WunderGraph Cosmo | GraphQL federation | — | — | — | Open-source router, self-host or managed, no usage penalties, audit logs & RBAC. | Supported |
| Zuplo | API gateways | Supported — Enterprise tier, with RBAC alongside it | — | — | A full management audit trail, listed as an Enterprise-tier feature. | — |
Compliance certifications
Yes/No/— compresses each provider's own sourced wording — a self-certification reads differently from an audited report, and the full nuance is one click away on the provider's own page. "No" only appears where a provider explicitly documents the absence (Clerk's own page says plainly it is not ISO 27001 certified); a dash means undocumented, never assumed.
| Provider | Category | SOC 2 | ISO 27001 | HIPAA | GDPR | PCI DSS |
|---|---|---|---|---|---|---|
| Ably | Realtime and websockets | Yes | — | Yes | — | — |
| AhaSend | Transactional email | — | Yes | — | Yes | — |
| Aiven | Managed databases | Yes | — | Yes | — | — |
| Algolia | Search | Yes | Yes | — | — | — |
| Alibaba Cloud | VPS and cloud | Yes | Yes | Yes | Yes | Yes |
| Amazon Aurora | Managed databases | Yes | Yes | Yes | Yes | Yes |
| Amazon CloudFront | CDN | Yes | Yes | Yes | Yes | Yes |
| Amazon ElastiCache | Caching | Yes | Yes | Yes | Yes | Yes |
| Amazon RDS | Managed databases | Yes | Yes | Yes | Yes | Yes |
| Amazon S3 | Object storage | Yes | Yes | Yes | Yes | Yes |
| Amazon SES | Transactional email | Yes | Yes | Yes | Yes | Yes |
| Amazon SQS | Queues and background jobs | Yes | Yes | Yes | Yes | Yes |
| Auth0 | Authentication | Yes | Yes | Yes | Yes | Yes |
| AWS Backup | Backup and DR | — | — | Yes | — | — |
| AWS Secrets Manager | Secrets management | Yes | Yes | Yes | Yes | Yes |
| Axiom | Error tracking and observability | Yes | Yes | Yes | Yes | — |
| Azure Blob Storage | Object storage | Yes | Yes | Yes | — | Yes |
| Azure Front Door | CDN | Yes | Yes | Yes | Yes | Yes |
| Azure Queue Storage | Queues and background jobs | Yes | Yes | Yes | — | Yes |
| Backblaze B2 | Object storage | Yes | No | Yes | Yes | Yes |
| Better Auth | Authentication | — | — | — | Yes | — |
| Better Stack | Error tracking and observability | Yes | No | No | Yes | No |
| BorgBase | Backup and DR | — | — | — | Yes | — |
| Buildkite | CI/CD | Yes | — | No | Yes | No |
| Bump.sh | Developer documentation platforms | Yes | — | — | Yes | — |
| Bunny CDN | CDN | — | Yes | — | Yes | — |
| CircleCI | CI/CD | Yes | — | — | Yes | Yes |
| Civo | VPS and cloud | Yes | Yes | — | Yes | — |
| Clerk | Authentication | Yes | No | Yes | Yes | No |
| ClickHouse Cloud | Data warehouses | Yes | — | — | — | — |
| Cloudflare | CDN | Yes | Yes | Yes | Yes | Yes |
| Cloudflare WAF | WAF and DDoS | — | — | — | — | Yes |
| Cloudinary | Image and video optimization | Yes | — | — | — | — |
| Cloudways | Managed hosting | — | — | — | Yes | No |
| Confluent Cloud | Event streaming | Yes | Yes | — | — | Yes |
| Cool Analytics | Web analytics | — | — | — | Yes | — |
| CoreWeave | GPU compute | Yes | Yes | Yes | Yes | — |
| Crunchy Bridge | Managed databases | Yes | — | — | — | — |
| Crusoe Cloud | GPU compute | Yes | Yes | Yes | No | — |
| DataBull | Web analytics | — | — | — | Yes | — |
| Datadog | Error tracking and observability | Yes | Yes | Yes | Yes | Yes |
| DigitalOcean | VPS and cloud | Yes | Yes | Yes | Yes | Yes |
| DigitalOcean App Platform | Application platforms | Yes | — | — | Yes | — |
| DigitalOcean Kubernetes | Managed Kubernetes | Yes | — | — | Yes | — |
| DigitalOcean Load Balancers | Load balancing | Yes | — | — | Yes | — |
| Doppler | Secrets management | Yes | Yes | — | Yes | — |
| DreamHost | Mass-market hosting | — | — | Yes | Yes | Yes |
| Elastic Cloud | Error tracking and observability | Yes | Yes | Yes | Yes | Yes |
| Estuary Flow | ETL and data pipelines | Yes | — | Yes | — | — |
| Fastly | CDN | Yes | Yes | Yes | Yes | Yes |
| Fathom Analytics | Web analytics | — | — | — | Yes | — |
| Fern | Developer documentation platforms | Yes | — | — | Yes | — |
| Firebase | Managed databases | Yes | Yes | — | Yes | — |
| Fivetran | ETL and data pipelines | Yes | Yes | Yes | Yes | Yes |
| Flywheel | Managed hosting | Yes | Yes | — | Yes | Yes |
| Gcore | CDN | Yes | Yes | — | Yes | Yes |
| GitBook | Developer documentation platforms | Yes | — | — | Yes | — |
| GitHub Actions | CI/CD | Yes | Yes | — | Yes | Yes |
| GlitchTip | Error tracking and observability | No | No | Yes | Yes | No |
| Google Cloud | VPS and cloud | Yes | Yes | — | — | Yes |
| Google Cloud Pub/Sub | Queues and background jobs | Yes | Yes | Yes | — | Yes |
| Google Cloud Run | Application platforms | Yes | Yes | Yes | — | Yes |
| Grafana Cloud | Error tracking and observability | Yes | Yes | — | Yes | Yes |
| Grafbase | GraphQL federation | Yes | — | — | — | — |
| Hasura | Data API layers | Yes | — | Yes | Yes | — |
| Hatchet | Queues and background jobs | Yes | — | Yes | Yes | — |
| Heroku | Application platforms | Yes | — | — | — | — |
| Hevo Data | ETL and data pipelines | Yes | — | Yes | Yes | — |
| Hostinger | Mass-market hosting | — | Yes | Yes | Yes | Yes |
| Hostinger VPS | VPS and cloud | No | Yes | Yes | Yes | Yes |
| Hyperstack | GPU compute | Yes | No | No | Yes | — |
| IDrive e2 | Object storage | Yes | — | — | — | — |
| ImageKit | Image and video optimization | Yes | Yes | — | — | — |
| imgix | Image and video optimization | Yes | — | — | — | — |
| Infisical | Secrets management | Yes | — | Yes | Yes | Yes |
| Inngest | Queues and background jobs | Yes | No | Yes | Yes | — |
| IONOS VPS | VPS and cloud | — | Yes | — | — | — |
| Kamatera | VPS and cloud | Yes | — | Yes | Yes | Yes |
| KeyCDN | CDN | — | Yes | — | Yes | — |
| Kinde | Authentication | Yes | Yes | Yes | Yes | No |
| Kinsta | Managed hosting | Yes | Yes | No | Yes | Yes |
| Lambda | GPU compute | Yes | Yes | Yes | Yes | Yes |
| Leaseweb | VPS and cloud | Yes | Yes | No | Yes | Yes |
| Linode (Akamai Cloud) | VPS and cloud | Yes | — | Yes | Yes | — |
| Liveblocks | Realtime and websockets | Yes | — | Yes | — | — |
| Mailgun | Transactional email | Yes | — | — | Yes | — |
| Mailjet | Transactional email | — | — | — | Yes | — |
| Meilisearch | Search | Yes | — | — | — | — |
| MemCachier | Caching | Yes | Yes | — | Yes | Yes |
| Mintlify | Developer documentation platforms | Yes | — | — | Yes | — |
| Modal | Model hosting and inference | Yes | — | Yes | — | — |
| MotherDuck | Data warehouses | Yes | — | — | Yes | — |
| Nebius AI Cloud | GPU compute | Yes | Yes | Yes | Yes | — |
| Neon | Managed databases | Yes | Yes | Yes | Yes | Yes |
| NetBird | Zero-trust network access | — | Yes | — | — | — |
| Netlify | Frontend and serverless | Yes | Yes | Yes | Yes | Yes |
| Nhost | Application platforms | Yes | — | Yes | — | — |
| Nile | Managed databases | Yes | — | — | Yes | — |
| OpenObserve | Error tracking and observability | Yes | Yes | Yes | Yes | Yes |
| Oracle Cloud | VPS and cloud | Yes | Yes | Yes | Yes | Yes |
| OVHcloud | VPS and cloud | Yes | Yes | Yes | Yes | Yes |
| Paddle | Payments | — | — | — | — | Yes |
| PagerDuty | Incident management and on-call | Yes | Yes | — | — | — |
| Paperspace | GPU compute | Yes | Yes | — | — | Yes |
| Pinecone | Vector databases | Yes | Yes | Yes | Yes | Yes |
| Pirsch Analytics | Web analytics | — | — | — | Yes | — |
| PlanetScale | Managed databases | Yes | — | Yes | Yes | Yes |
| Plausible Analytics | Web analytics | — | — | — | Yes | — |
| Plivo | SMS and messaging APIs | — | — | — | — | Yes |
| Postmark | Transactional email | — | — | — | Yes | — |
| Pressable | Managed hosting | Yes | Yes | No | Yes | Yes |
| ProsperOps | Cloud cost management | Yes | — | — | — | — |
| PubNub | Realtime and websockets | — | — | Yes | Yes | — |
| Pulumi | Infrastructure as code | Yes | — | — | — | — |
| Pusher Channels | Realtime and websockets | — | Yes | — | — | — |
| Qdrant | Vector databases | Yes | — | Yes | Yes | — |
| Railway | Application platforms | Yes | — | Yes | Yes | — |
| ReadMe | Developer documentation platforms | Yes | — | — | Yes | — |
| Redis Cloud | Caching | Yes | Yes | Yes | Yes | Yes |
| Redocly | Developer documentation platforms | Yes | — | — | Yes | — |
| Render | Application platforms | — | — | Yes | Yes | — |
| Resend | Transactional email | Yes | No | No | Yes | — |
| rsync.net | Backup and DR | No | — | Yes | Yes | Yes |
| RunPod | GPU compute | Yes | Yes | Yes | Yes | Yes |
| Scalar | Developer documentation platforms | Yes | — | — | — | — |
| ScaleGrid | Managed databases | Yes | — | Yes | Yes | Yes |
| Scalr | Infrastructure as code | Yes | — | — | — | — |
| Seline | Web analytics | — | — | — | Yes | — |
| Sentry | Error tracking and observability | Yes | Yes | Yes | — | — |
| SigNoz | Error tracking and observability | Yes | — | Yes | Yes | — |
| Simple Analytics | Web analytics | Yes | — | — | Yes | — |
| SimpleBackups | Backup and DR | Yes | Yes | — | Yes | — |
| SiteGround | Mass-market hosting | — | No | No | Yes | Yes |
| Spacelift | Infrastructure as code | Yes | — | — | — | — |
| Statsig | Feature flags | Yes | — | — | — | — |
| Storj | Object storage | Yes | — | Yes | Yes | — |
| Stripe | Payments | Yes | — | — | — | Yes |
| Stytch | Authentication | Yes | Yes | Yes | Yes | Yes |
| Supabase | Managed databases | Yes | Yes | Yes | Yes | — |
| SuperTokens | Authentication | Yes | — | — | Yes | — |
| Tailscale | Zero-trust network access | Yes | — | Yes | — | Yes |
| Telnyx | SMS and messaging APIs | Yes | — | Yes | — | — |
| Temporal | Queues and background jobs | Yes | Yes | Yes | Yes | Yes |
| TigerData | Managed databases | Yes | — | Yes | Yes | — |
| Traks | Web analytics | — | — | — | Yes | — |
| Trigger.dev | Queues and background jobs | Yes | — | Yes | Yes | — |
| Turbopuffer | Vector databases | Yes | — | Yes | Yes | Yes |
| Turso | Managed databases | Yes | — | Yes | Yes | — |
| Umami | Web analytics | — | — | — | Yes | — |
| Unleash | Feature flags | Yes | Yes | — | Yes | — |
| UpCloud | VPS and cloud | Yes | Yes | Yes | Yes | Yes |
| Uploadcare | Image and video optimization | Yes | — | Yes | Yes | — |
| Upstash Redis | Caching | Yes | No | Yes | Yes | No |
| Vantage | Cloud cost management | Yes | — | — | — | — |
| Vercel | Frontend and serverless | Yes | Yes | Yes | No | Yes |
| Vultr | VPS and cloud | Yes | — | — | — | — |
| Wasabi | Object storage | — | Yes | — | — | — |
| Weaviate | Vector databases | Yes | Yes | Yes | Yes | — |
| WorkOS | Authentication | Yes | — | Yes | Yes | Yes |
| WP Engine | Managed hosting | Yes | Yes | No | Yes | Yes |
| Zeabur | Application platforms | No | — | — | Yes | — |
| Zeplo | Queues and background jobs | — | — | — | Yes | — |
| Zuplo | API gateways | Yes | — | — | — | — |
Sources (348) →Sources ↓
- Algolia Pricing ↗
“Get started building your best search experiences ever with access to some of our features to start for free. No credit card required.”
Read 2026-09-15 · official pricing
- Amazon OpenSearch Service Pricing ↗
“For instances, you can use on-demand or Reserved Instance pricing, or save with Database Savings Plans.”
Read 2026-09-15 · official pricing
- Apollo Pricing and Plans ↗
“GraphOS - Apollo's complete API management platform Supports any GraphQL API Self-hosted GraphOS Router (limited to 60 requests per minute)”
Read 2026-09-15 · official pricing
- Archbee Pricing: The Knowledge Portal Platform Your Entire Team Will Love ↗
“Enterprise Complete documentation solutions for large orgs & enterprises. Custom pricing Everything in Scaling All add-ons included Multiple teams/orgs AI-assisted translations SAML & OIDC SSO Invoicing options”
Read 2026-10-25 · official pricing
- CloudPrem - Archbee Documentation and Help Center ↗
“CloudPrem is a single-tenant deployment of Archbee that runs entirely inside an AWS account you own and control. [...] Archbee operates the application for you, but your data stays in your account.”
Read 2026-10-25 · official docs
- Pricing — Auth0 ↗
“1 Enterprise Connection [...] Self-Service SSO [...] Custom User & SSO Tiers”
Read 2026-09-06 · official pricing
- Deployment Options - Auth0 Docs ↗
“The Auth0 identity platform can be deployed in the following ways: [...] Public Cloud A multi-tenant cloud service running on Auth0’s cloud with standard authentication, personalization, user management, and security features [...] The Private Cloud packages are managed services that you can use if you:”
Read 2026-09-13 · official docs
- Log AWS Secrets Manager events with AWS CloudTrail - AWS Secrets Manager ↗
“AWS CloudTrail records all API calls for Secrets Manager as events, including calls from the Secrets Manager console, as well as several other events for rotation and secret version deletion. [...] You can use the CloudTrail console to view the last 90 days of recorded events.”
Read 2026-09-13 · official docs
- Security and compliance, by default - Axiom ↗
“Every access and configuration change is recorded to an immutable audit trail you can query in APL like any other dataset.”
Read 2026-09-21 · official site
- Frequently asked questions - Axiom Docs ↗
“How is Axiom deployed? Axiom offers Axiom Cloud, a fully managed cloud service with usage-based pricing. [...] For the Bring Your Own Cloud plan, the platform fee is billed on an annual basis.”
Read 2026-09-13 · official docs
- Single Sign-On (SSO) — Better Auth docs ↗
“Single Sign-On (SSO) allows users to authenticate with multiple applications using a single set of credentials. This plugin supports OpenID Connect (OIDC), OAuth2 providers, and SAML 2.0.”
Read 2026-09-14 · official docs
- SCIM — Better Auth docs ↗
“The SCIM plugin adds an inbound System for Cross-domain Identity Management (SCIM) 2.0 service to Better Auth. A directory can use this service to create, update, deactivate, and delete users and groups in your application.”
Read 2026-09-14 · official docs
- Two-Factor Authentication — Better Auth docs ↗
“Two-Factor Authentication (2FA) adds an extra security step when users log in. Instead of just using a password, they'll need to provide a second form of verification.”
Read 2026-09-14 · official docs
- Pricing — Better Auth ↗
“Starter [...] 10,000 audit logs / month 1 day retention [...] Pro [...] 20,000 audit logs / month then $0.0001 per event”
Read 2026-09-06 · official pricing
- Better Stack vs SigNoz: a complete comparison for 2026 | Better Stack Community ↗
“For organizations with strict data sovereignty requirements, this flexibility is a real differentiator that Better Stack's SaaS-only model cannot match. [...] SigNoz's self-hosted option is a genuine differentiator that Better Stack cannot offer.”
Read 2026-09-13 · official site
- BorgBase - Simple and Secure Offsite Backups ↗
“Secured with 2FA”
Read 2026-09-15 · official pricing
- Frequently asked questions | Bump.sh Docs & Guides ↗
“Does Bump.sh support SSO? Yes, on custom plans. SSO runs on WorkOS and supports generic SAML, SCIM, OpenID Connect, Okta, Auth0, Keycloak, Azure AD, Google SAML and more.”
Read 2026-10-25 · official docs
- Security · Bump.sh ↗
“Deployment model: Cloud‑only”
Read 2026-10-25 · official site
- Pricing — Clerk ↗
“Enterprise SSO for workspace [...] Leverage authentication with EASIE, SAML, or OIDC supported services.”
Read 2026-09-06 · official pricing
- Directory Sync — Clerk Docs ↗
“For Okta, Microsoft Entra ID, and custom providers, Directory Sync uses the System for Cross-domain Identity Management (SCIM) 2.0 protocol. [...] Directory Sync does not have a separate fee. To use it in a production instance, you need an enterprise connection, which requires the Pro or Business plan”
Read 2026-09-07 · official docs
- Confluent Cloud Pricing ↗
“high availability with 99.99% uptime SLA infinite storage audit logs to detect security threats”
Read 2026-09-16 · official pricing
- Cool Analytics vs Plausible: features & pricing compared – Cool Analytics ↗
“No. Cool Analytics is hosted only — we run it for you.”
Read 2026-10-25 · official site
- DataBull · see which posts actually make you money ↗
“DataBull deploys into your own Cloudflare account: a Worker serves the dashboard, the API and the tracking script, and a D1 database keeps your visitors and sales.”
Read 2026-10-25 · official site
- Trust Hub | Datadog ↗
“Datadog Audit Trail helps customers monitor user and system activity within their organization, including who performed an action, what action was taken, and relevant context about the activity.”
Read 2026-09-21 · official site
- BYOC Logs Architecture — Datadog Docs ↗
“The BYOC Logs engine runs in your environment. [...] The Observability Pipelines Worker and the BYOC Logs engine process log data in your environment. Datadog hosts the pipeline configuration UI and Log Explorer, and routes queries to the engine. [...] No log data leaves your environment during ingestion.”
Read 2026-09-13 · official docs
- Directus Pricing ↗
“Self-Host or Cloud Pricing Pricing Try Directus Cloud free for 14 days, no commitment”
Read 2026-09-14 · official pricing
- Doppler Pricing ↗
“Developer: 3 days of activity logs. Team: 90 Days of activity logs. Enterprise: Custom activity log retention.”
Read 2026-09-11 · official pricing
- DreamFactory Pricing ↗
“Open Source Created for hands-on learning, personal project, and early stage development Free Try for free on Digital Ocean”
Read 2026-09-14 · official pricing
- Elastic Subscriptions ↗
“Elastic self-managed subscriptions The Elastic Stack - Elasticsearch, Kibana, and Integrations - powers a variety of use cases. And we have flexible plans to help you get the most out of your on-prem subscriptions. [...] Available under the Elastic License. Select features are also available under SSPL or Apache License 2.0.”
Read 2026-09-14 · official site
- Estuary Pricing & Plans ↗
“Everything in Cloud, plus Volume-based discounts SOC 2 & HIPAA compliance reports Single sign-on (SSO) Custom SLA terms”
Read 2026-09-15 · official pricing
- Single Sign-On | Fern Documentation ↗
“available only for the Enterprise plan [...] SSO lets your team access your docs through your organization’s identity provider using SAML 2.0 or OIDC.”
Read 2026-10-25 · official docs
- Self-hosted documentation | Fern Documentation ↗
“available only for the Enterprise plan [...] Self-hosting allows you to deploy your documentation site on your own infrastructure to meet specific security or compliance requirements.”
Read 2026-10-25 · official docs
- Flagsmith Pricing ↗
“deployment cloud self-hosted private cloud open source customers use cases”
Read 2026-09-16 · official pricing
- Deploying | Fumadocs ↗
“Your Fumadocs app is powered by the underlying React framework (e.g. Next.js), you will need to check the relevant docs of your React framework for deployment guides. [...] If you want to deploy your Fumadocs app using Docker”
Read 2026-10-25 · official docs
- GitBook pricing & plans | GitBook ↗
“Allow team members in your organization to sign into the GitBook app using a third-party identity provider. [...] SAML SSO: not included in the Free, Essential, and Ultimate plans; included in the Enterprise plan.”
Read 2026-10-25 · official pricing
- Pricing — GlitchTip ↗
“Self-hosted version [...] Free [...] Up to 1,000 events/mo”
Read 2026-09-06 · official pricing
- GoatCounter — open source web analytics ↗
“GoatCounter is an open source web analytics platform available as a free donation-supported hosted service or self-hosted app.”
Read 2026-09-15 · official site
- Pricing — Grafana Cloud ↗
“minimum commit of $25,000 per year. Cloud or self-host”
Read 2026-09-06 · official pricing
- Grafbase Pricing ↗
“Enterprise Custom pricing Fully self-hostable Roadmap influence Dedicated customer success team”
Read 2026-09-15 · official pricing
- Hasura DDN Pricing ↗
“Local development Self-hosting with v3 graphql-engine Collaboration Schema registry & changelog”
Read 2026-09-14 · official pricing
- Use single sign-on with SAML ↗
“The SAML SSO integration currently supports the following features of SAML 2.0:”
Read 2026-09-15 · official docs
- Audit trails API reference ↗
“Note: Audit trails are available in HCP Terraform Standard and Premium editions.”
Read 2026-09-15 · official docs
- Terraform Enterprise ↗
“Terraform Enterprise is a self-hosted instance of HCP Terraform with features like audit logging and SAML single sign-on.”
Read 2026-09-15 · official docs
- Hevo Pricing ↗
“Everything in Professional, plus: Streaming Pipelines Role Based Access Control Single sign-on Multiple Workspaces”
Read 2026-09-15 · official pricing
- IDrive assist your company meet business compliance mandate ↗
“IDrive provides controlled access, encryption, and audit logging for sensitive data.”
Read 2026-09-21 · official site
- Image & Video API, Agentic DAM, Creative Automation: Complete Visual Media Platform | ImageKit.io ↗
“Folder-level path policies, audit logs, role-based access controls, and AI-powered moderation ensure your media stays compliant and organized at scale.”
Read 2026-09-21 · official site
- Infisical Pricing ↗
“Everything in Free, plus: Unlimited identities Access Controls Secret Rotation SAML SSO 30-day Audit log retention [...] Everything in Pro, plus: Dynamic Secrets Honey Tokens SOC 2 Type II Higher Rate Limits Custom Roles SSO & MFA enforcement 90-day Audit log retention [...] Custom Audit log retention and rate limits”
Read 2026-09-14 · official pricing
- Pricing — Kinde ↗
“All features in Pro , and: Free enterprise SSO 6% MAU discount”
Read 2026-09-06 · official pricing
- Kinde Auth, billing and access management for modern SaaS products. ↗
“Kinde includes enterprise SSO, RBAC, advanced security, custom domains, audit logs, and compliance features on higher plans.”
Read 2026-09-21 · official site
- Enterprise search | Meilisearch Solutions ↗
“API access and config audit trail, plus role-based access and tenant isolation.”
Read 2026-09-21 · official site
- Meilisearch Pricing ↗
“Should I self-host or use Cloud?Self-hosting is free and gives you full infrastructure control, but you manage updates, backups, and”
Read 2026-09-15 · official pricing
- Single sign-on (SSO) - Mintlify ↗
“SSO is available on Enterprise plans . Enterprise admins can configure Security Assertion Markup Language (SAML) SSO for Okta or Microsoft Entra directly from the Mintlify dashboard.”
Read 2026-10-25 · official docs
- Self-host - Mintlify ↗
“Run Mintlify inside your own cloud or on-premises environment, on AWS or any Kubernetes platform including Azure, Google Cloud, Oracle Cloud, and OpenShift. [...] Self-hosting requires an Enterprise plan.”
Read 2026-10-25 · official docs
- Security and privacy at Modal | Modal Docs ↗
“Per Enterprise contract (see Audit logs )”
Read 2026-09-21 · official site
- NetBird Pricing ↗
“provisioning (SCIM) Audit events logging Support via ticketing system”
Read 2026-09-16 · official pricing
- Pricing — OpenObserve ↗
“Cloud Self Hosted Most Popular Cloud [...] Pay-as-you-go from $0.50/GB ingested and $0.01/GB queried, with retention included.”
Read 2026-09-06 · official pricing
- OpenTofu ↗
“community-driven infrastructure as code tool under the Linux Foundation's stewardship”
Read 2026-09-15 · official site
- Self-hosted Piqo — one-time license, your own server ↗
“The same analytics as the cloud, packed into one Docker image with SQLite inside. Buy a license once, run it on any box with Docker, and track as many sites as you like.”
Read 2026-10-25 · official site
- Security and compliance - PlanetScale ↗
“In addition to the audit log feature available to all PlanetScale plans, Enterprise plans can use our EventBridge configuration to send logs to your AWS account.”
Read 2026-09-21 · official site
- Portable Security ↗
“We implement role-based access control, multi-factor authentication, and other best practices”
Read 2026-09-15 · official site
- Pulumi Pricing ↗
“EVERYTHING IN TEAM, PLUS: Unlimited users SAML/SSO and RBAC Neo scheduled tasks Internal developer platform (IDP) Audit logs”
Read 2026-09-15 · official pricing
- Qdrant Security: Compliance, Isolation, and Encryption Across Every Deployment ↗
“Audit logging, available on paid clusters, captures operations performed through the Qdrant API, including user and API key attribution, timestamp, target collection, and result of the action.”
Read 2026-09-21 · official site
- Railway Trust Center ↗
“Product Security Audit Logging Data Security Integrations View more Reports HIPAA Report Pentest Report SOC 2 Report View more”
Read 2026-09-14 · official site
- Single Sign-On (SSO) ↗
“Single Sign-On is an Enterprise feature. [...] lets your Teammates log in to ReadMe using your organization's existing SAML 2.0 identity provider”
Read 2026-10-25 · official docs
- Redoc CE deployment guide ↗
“Redoc CE offers multiple ways of rendering your API description. [...] Docker image: serve the documentation from a container, configured with environment variables.”
Read 2026-10-25 · official docs
- Redpanda Pricing ↗
“SSO (Google, GitHub), Kafka access control lists (ACLs)”
Read 2026-09-16 · official pricing
- Render | The cloud for builders ↗
“Built-in audit logging and monitoring for platform events.”
Read 2026-09-21 · official site
- Rootly for Security Teams ↗
“An audit trail that's ready before anyone asks.”
Read 2026-09-21 · official site
- Scalar Pricing — Free & Paid Plans for API Docs & SDKs ↗
“Business $600/month, or $500/month billed yearly SSO and subpath hosting, 10 editor seats, up to 25 APIs and SDKs up to 250 endpoints.”
Read 2026-10-25 · official pricing
- Scalar Enterprise — API Platform for Enterprise Teams ↗
“Self-hosting with an MIT-licensed core when data must stay in your perimeter.”
Read 2026-10-25 · official site
- Scalr Pricing ↗
“the full set of core features such as drift detection, policy enforcement, and the module and provider registries”
Read 2026-09-15 · official pricing
- Seline Analytics vs Plausible - Seline Analytics ↗
“Seline is managed cloud and focuses on low-maintenance analytics operations.”
Read 2026-10-26 · official site
- Security, Privacy, and Compliance Practices | Sentry ↗
“In the audit log, all of the actions by user and event within the Sentry UI (e.g., member.invite, project.create) are listed chronologically by time and IP address so you’ll always have a view into your organization’s most recent history.”
Read 2026-09-21 · official site
- Self-Hosted Sentry — Sentry Developer Documentation ↗
“In addition to making its source code available publicly, Sentry offers and maintains a minimal setup that works out-of-the-box for simple use cases. This version comes with no guarantees or dedicated support. Sentry engineers will do their best to answer questions and are dedicated to making sure self-hosted is running, but that's where our involvement ends.”
Read 2026-09-06 · official docs
- Pricing — SigNoz ↗
“SigNoz Cloud: BYOC, managed by SigNoz in your cloud account Self-Hosted SigNoz: enterprise support. Your team operates infrastructure, storage, scaling, upgrades, and backups.”
Read 2026-09-06 · official pricing
- Spacelift Pricing ↗
“Audit trail SSO integration with SAML 2.0 OIDC API Keys Internal source control system Enhanced Onboarding Sup”
Read 2026-09-15 · official pricing
- Amplitude Trust Center - SOC 2 Type II, SOC 1 Type II | Powered by Wolfia ↗
“Comprehensive cloud audit logging”
Read 2026-09-21 · official site
- Single Sign-On | Stoplight ↗
“This feature is available on the Stoplight Pro Team and Enterprise plans. [...] Organizations that need enhanced security requirements can configure SAML SSO”
Read 2026-10-25 · official docs
- Security at Stripe | Stripe Documentation ↗
“You can also view audit logs of important account changes and activity in your security history .”
Read 2026-09-21 · official site
- Pricing — Stytch ↗
“Full suite of authn and authz features -- OAuth, SSO, Sessions, and RBAC”
Read 2026-09-06 · official pricing
- Event Logs — Stytch Docs ↗
“Event logs should be available within a minute upon request completion and are currently retained for 30 days. For longer retention or external analysis, we recommend enabling event log streaming. [...] Currently Datadog Logs and Grafana Loki are the only supported destinations.”
Read 2026-09-13 · official docs
- SCIM Provisioning Explained: The Definitive Guide for Enterprise SaaS (2026) ↗
“SuperTokens does not provide SCIM out of the box, but you can implement SCIM endpoints on top of it for full control and flexibility.”
Read 2026-09-13 · official site
- Pricing — SuperTokens ↗
“Multi-factor Authentication $0.01 / MAU”
Read 2026-09-06 · official pricing
- Tailscale Pricing ↗
“everything in personal, plus unlimited users deploy users and groups with scim up to 10 acl groups”
Read 2026-09-16 · official pricing
- Traks: Privacy-friendly web analytics ↗
“SELF-HOSTED WEB ANALYTICS Analytics you own , not rent. Traks runs entirely in your own Cloudflare account”
Read 2026-10-25 · official site
- Twingate Pricing ↗
“native device posture checks mfa for bastion host, ssh, and more automated least privilege policies”
Read 2026-09-16 · official pricing
- Typesense — Open Source Alternative to Algolia + Pinecone ↗
“Typesense is a lightning-fast, open-source search engine designed to deliver instant, relevant search results.”
Read 2026-09-15 · official site
- Pricing – Umami ↗
“Umami is open-source and can be self-hosted for free.”
Read 2026-10-25 · official site
- Feature Management Platform / Feature Flags for Large Enterprise ↗
“Unleash is SOC 2 Type II and GDPR compliant to meet the requirement of the world's largest enterprises, with SSO support (SAML 2.0, OpenID Connect, Okta, Azure AD), granular role-based access control, change request workflows with four-eyes approvals, and audit logs with up to two years of retention.”
Read 2026-09-21 · official site
- Unleash Pricing ↗
“cloud, self-hosted or hybrid. contact sales”
Read 2026-09-16 · official pricing
- Vantage Pricing ↗
“email support saml single sign-on (sso) 3 users”
Read 2026-09-16 · official pricing
- Pricing — WorkOS ↗
“Single Sign-On Enterprise single sign-on with SAML and OIDC support”
Read 2026-09-06 · official pricing
- Using WorkOS with On-prem Customers – WorkOS Docs ↗
“For customers operating in air-gapped environments with no external network connectivity, cloud-based authentication services like WorkOS cannot be utilized as they require API connectivity.”
Read 2026-09-13 · official docs
- WunderGraph – GraphQL Federation, built to govern - WunderGraph ↗
“Open-source router, self-host or managed, no usage penalties, audit logs & RBAC.”
Read 2026-09-21 · official site
- WunderGraph Cosmo Pricing ↗
“Everything you need to build, manage, and scale your federated GraphQL APIs. Developer For individual developers and small projects. Free forever Self-Hosted Router”
Read 2026-09-15 · official pricing
- Zuplo Pricing ↗
“SSO + RBAC enterprise Single sign-on with role-based access.”
Read 2026-09-15 · official pricing
- https://ably.com/security-and-compliance ↗
“Ably regularly completes audits of our product, infrastructure, and policies to the satisfaction of the SOC 2 Type 2 standard.”
Read 2026-09-21 · official site
- https://ably.com/ ↗
“HIPAA BAA Compliance for your healthcare solution.”
Read 2026-09-21 · official site
- Security and compliance | AhaSend ↗
“GDPR compliant Hosted in Europe ISO 27001 · in progress”
Read 2026-09-21 · official site
- Security, Privacy & Compliance | Aiven ↗
“We also provide ISAE 3000/SOC2 Type II reports.”
Read 2026-09-22 · official site
- Trust Center - Algolia ↗
“Algolia SOC 2 Type 2 Final Report 2026.05.12.pdf”
Read 2026-09-22 · official site
- Alibaba Cloud System and Organization's Controls (SOC2) - Alibaba Cloud ↗
“SOC 2 Type 2 Report : This report describes Alibaba Cloud's internal controls [...] relevant to security, availability, and confidentiality [...] Alibaba Cloud issues SOC reports twice a year with a reporting period of 12 months on a continuous rolling basis (1 April to 31 March and 1 October to 30 September). The latest SOC reports are available in May and November each year. Alibaba Cloud SOC Reports are available to Alibaba Cloud customers in Alibaba Cloud Compliance Repository”
Read 2026-09-27 · official site
- Alibaba Cloud (Singapore) Private Limited ISO/IEC 27001 certificate (BSI), linked from the Alibaba Cloud Trust Center ↗
“Operates an Information Security Management System which complies with the requirements of ISO/IEC 27001:2022 [...] Latest Revision Date: 2025-10-15 Expiry Date: 2027-11-03 [...] Elastic Compute Service, Elastic Block Storage, Auto Scaling [...] Global Accelerator, Cloud Firewall, Simple Application Server”
Read 2026-09-27 · official site
- Health Insurance Portability and Accountability Act (HIPAA) - Alibaba Cloud ↗
“Alibaba Cloud fully supports the Business Associate Agreement (BAA) for customers that require strict compliance with the HIPAA requirements to protect the privacy and security of healthcare information. For detail information, please refer to our HIPAA whitepaper, which covers multiple Alibaba Cloud products and services compliance under HIPAA security requirements.”
Read 2026-09-27 · official site
- Security Compliance FAQs - Alibaba Cloud Trust Center ↗
“Customers can choose the Alibaba Cloud Region(s) or Zone(s) where their content will be located. [...] Alibaba Cloud only stores and processes each customer's content in the Alibaba Cloud Region(s) that is chosen by the customer. Alibaba Cloud will not move customer content without the customer's consent. [...] Alibaba Cloud provides a GDPR Addendum that includes the Standard Contractual Clauses”
Read 2026-09-27 · official site
- PCI Data Security Standards Compliance - Alibaba Cloud ↗
“Alibaba Cloud engaged with PCI SSC Approved Qualified Security Assessor (QSA) to conduct annual onsite assessment, i.e., PCI DSS v3.2.1 level 1 certified. The scope of the PCI DSS assessment includes cloud products, security services and CDN services that are available in 12 global regions (including Hong Kong). The Attestation of Compliance (AOC) report is available for downloading.”
Read 2026-09-27 · official site
- Compliance validation for Amazon Aurora — Amazon Aurora User Guide ↗
“Third-party auditors assess the security and compliance of Amazon Aurora as part of multiple AWS compliance programs. These include SOC, PCI, FedRAMP, HIPAA, and others. [...] You can download third-party audit reports using AWS Artifact.”
Read 2026-09-13 · official docs
- ISO/IEC 27001:2022 Compliance — AWS ↗
“AWS has certification for compliance with ISO/IEC 27001:2022, 27017:2015, and 27018:2019. These certifications are performed by independent third-party auditors.”
Read 2026-09-12 · official site
- HIPAA Eligible Services Reference — AWS ↗
“The services listed below are eligible to create, receive, process, maintain, or transmit electronic protected health information (ePHI). [...] Amazon Aurora AWS B2B Data Interchange AWS Backup AWS Batch Amazon Bedrock Amazon Bedrock”
Read 2026-09-13 · official site
- GDPR — Amazon Web Services ↗
“AWS customers can use all AWS services to process personal data [...] in compliance with the GDPR. [...] Customers have control of their customer data. With AWS, customers can: Determine where their customer data will be stored, including the type of storage and geographic region of that storage.”
Read 2026-09-12 · official site
- AWS Services in Scope — SOC ↗
“This webpage provides a list of AWS Services in Scope of AWS assurance programs. [...] Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of”
Read 2026-09-13 · official site
- AWS Services in Scope — PCI DSS ↗
“This webpage provides a list of AWS Services in Scope of AWS assurance programs. [...] Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of”
Read 2026-09-13 · official site
- Okta Security Trust Center ↗
“ProcessUnity SOC 1 SOC 2 SOC 3 GovRAMP [...] REPORTS SOC 1 Report REPORTS SOC 2 Report REPORTS SOC 3 Report”
Read 2026-09-14 · official site
- Auth0 Data Privacy and Compliance - Auth0 Docs ↗
“Auth0 offers PCI compliant environment deployment models. Our Attestation of Compliance (AOC) and/or Self Assessment Questionnaire (SAQ-D) is available upon request.”
Read 2026-09-13 · official docs
- Compliance validation for AWS Secrets Manager - AWS Secrets Manager ↗
“ISO - AWS Secrets Manager has successfully completed compliance certification for ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, and ISO 9001.”
Read 2026-09-13 · official docs
- Security | Axiom Docs ↗
“You can request a Business Associate Agreement (BAA) with Axiom if you meet the following requirements”
Read 2026-09-13 · official docs
- Azure compliance documentation — Microsoft Learn ↗
“Compliance offerings [...] SOC 1 SOC 2 SOC 3”
Read 2026-09-12 · official site
- Azure Front Door Frequently Asked Questions (FAQ) | Microsoft Learn ↗
“The only location you choose when you create a Front Door is the location of the resource group, which determines where the resource group's metadata is stored. The Front Door profile is a global resource and its configuration is distributed to all edge locations worldwide.”
Read 2026-09-13 · official docs
- Cloud Regulatory Compliance — Backblaze B2 ↗
“Backblaze has achieved Service Organization Control (SOC) 2 Type 2 compliance by an independent third-party firm. Backblaze operates in data centers that are also SOC 2 compliant.”
Read 2026-09-12 · official site
- Data Processing Addendum — Better Auth ↗
“Where Personal Data is transferred outside the EEA, UK, or Switzerland, Processor shall ensure appropriate safeguards are in place, including the Standard Contractual Clauses set forth in Exhibit A. [...] The Standard Contractual Clauses approved by European Commission Implementing Decision (EU) 2021/914 of 4 June 2021”
Read 2026-09-13 · official site
- Security and Compliance | Better Stack ↗
“Yes, Better Stack is SOC2 Type 2 compliant. Contact us for more details or to access the latest report.”
Read 2026-09-13 · official site
- Security — Buildkite ↗
“Buildkite maintains a SOC 2 Type II report - an independent audit performed annually that verifies the design and operating effectiveness of our security practices including access controls, system monitoring, threat detection, and incident response.”
Read 2026-09-12 · official site
- Buildkite Terms of Service | Legal overview | Buildkite ↗
“Customer specifically agrees not to collect, store, process or transmit any Sensitive Personal Information using the Buildkite Solution. [...] Customer acknowledges that Buildkite is not a Business Associate or subcontractor (as those terms are defined in HIPAA) or a payment card processor and that the Buildkite Solution is neither HIPAA nor PCI DSS compliant.”
Read 2026-09-13 · official site
- Buildkite Privacy Policy | Information collection and storage | Buildkite ↗
“Servers for Buildkite’s service are located in the United States of America. If you purchase a Buildkite Hosted Agents, servers may be located in the United States of America or Europe.”
Read 2026-09-13 · official site
- BunnyWay d.o.o | Trust Center ↗
“bunny.net maintains technical and organisational measures designed to protect customer data, including: ISO 27001 certified information security management [...] ISO 27001 Certificate”
Read 2026-09-13 · official site
- Routing Filters - bunny.net Documentation ↗
“This is primarily useful for GDPR compliance and data residency requirements where you need to ensure user data stays within specific geographic boundaries. [...] Routes all traffic exclusively through 24 PoPs within EU member states [...] Routes all traffic exclusively through 26 PoPs, covering every EU PoP plus Iceland and Norway”
Read 2026-09-13 · official docs
- CircleCI Security ↗
“SOC 2 Type II provides CircleCI with an opportunity to meet (and exceed) industry standards and gives our customer organization's access to industry-recognized, standardized reports that they can compare across services in our space.”
Read 2026-09-14 · official site
- Commitment to data privacy - CircleCI ↗
“CircleCI processes the personal data of customers who are citizens or residents of the European Union in accordance with the EU General Data Protection Regulation, and processes the personal data of customers who are citizens or residents of the United Kingdom in accordance with the UK General Data Protection Regulation. [...] For customers interested in signing a data processing addendum with CircleCI, you can sign our DPA here”
Read 2026-09-13 · official site
- Purpose-Built Civo Sovereign Cloud Services for India | Civo ↗
“Certified with ISO 27001 and SOC2, we guarantee data protection. [...] Our infrastructure complies with industry-leading certifications such as ISO 27001 and SOC 2 for the highest levels of security and trust.”
Read 2026-09-27 · official site
- Civo UK Sovereign Cloud – Total control, zero compromise | Civo ↗
“Your data stays in the UK and under UK law. [...] Our entire UK operation is subservient only to UK law, which includes the UK GDPR and the Data Protection Act 2018.”
Read 2026-09-27 · official site
- Clerk Security ↗
“Clerk has been SOC 2 Type 2 certified since May 6, 2022.”
Read 2026-09-11 · official site
- The fastest real-time analytic database for Cybersecurity | ClickHouse ↗
“ISO 27001, PCI DSS, HIPAA, GDPR and SOC 2 Type 2”
Read 2026-09-21 · official site
- Certifications and compliance resources — Cloudflare Trust Hub ↗
“Certifications and Reports [...] SOC 2 Type II [...] Certification to attest to Security, Confidentiality, and Availability controls in place in accordance to the AICPA Trust Service Criteria.”
Read 2026-09-13 · official site
- Data Localization Suite · Cloudflare Docs ↗
“Enterprise-only paid add-on [...] The Data Localization Suite (DLS) is a collection of tools that enable customers to choose the location where Cloudflare inspects and stores data, while maintaining the security and performance benefits of our global network.”
Read 2026-09-13 · official docs
- Cloudflare Plans ↗
“PCI DSS 4.0 Compliance”
Read 2026-09-15 · official pricing
- Trust | Cloudinary ↗
“The SOC reports are independent third-party examination reports, produced by Deloitte, that demonstrate how Cloudinary has achieved key compliance controls and objectives that meet the SOC 2 Trust Principles criteria for Security, Availability, Privacy, Confidentiality and the HIPAA Security Rule.”
Read 2026-09-21 · official site
- Which Infrastructure Provider Do I Have to Choose? | Cloudways Help Center ↗
“Data Center Availability: Choose data center locations that best serve your target audience. [...] Frankfurt, Germany Amsterdam, Netherlands”
Read 2026-09-27 · official docs
- Does Cloudways Provide PCI Compliance? | Cloudways Help Center ↗
“A web hosting platform alone cannot be fully PCI-compliant. PCI compliance depends on both the hosting environment and how the application is configured and used. [...] Some of these providers offer PCI-DSS Level 1 compliant infrastructure, including:”
Read 2026-09-27 · official docs
- Confluent | The Data Streaming Platform ↗
“Security is built in, with enterprise-grade features and compliance certifications including SOC 2, ISO 27001, and PCI DSS.”
Read 2026-09-21 · official site
- Data Processing Agreement – Cool Analytics ↗
“Data is stored in the EU (Germany). Where data is accessed or handled outside the EU/EEA or UK — including by us in India for support and maintenance — we rely on the European Commission's Standard Contractual Clauses”
Read 2026-10-25 · official site
- CoreWeave Trust Center ↗
“Browse documents, certifications, and compliance details with confidence. [...] use the "Get Access" button on the top-right corner of the page to request access to the detailed security documentation. [...] Badges ISO 27001 SOC 2 Type II ISO 27017 ISO 27018”
Read 2026-10-17 · official site
- Compliance programs - CoreWeave Docs ↗
“CoreWeave aligns its security and compliance programs with recognized regulatory standards so you can run sensitive and regulated workloads on the CoreWeave Cloud. [...] third-party assessments that map to major frameworks and regulations such as: SOC 2 ISO 27001 ISO 27017 ISO 27018”
Read 2026-10-17 · official docs
- Security architecture - CoreWeave Docs ↗
“CoreWeave’s multi-tenant isolation and encryption features are backed by enforceable technical controls that support trustworthy, secure AI adoption at scale. They help customers address regulatory requirements such as GDPR, HIPAA, and CCPA.”
Read 2026-10-17 · official docs
- About Regions and Availability Zones (AZs) - CoreWeave Docs ↗
“CoreWeave uses Geos to manage global infrastructure, ensure compliance with regulatory requirements, and optimize for large-scale redundancy and disaster recovery. [...] CoreWeave places Regions to offer low latency, high-performance connectivity, and to meet data residency requirements.”
Read 2026-10-17 · official docs
- Crunchy Data Security | Crunchy Data ↗
“Crunchy Data has a SOC 2 Type 2 report for Crunchy Bridge.”
Read 2026-09-21 · official site
- Crusoe Trust Center ↗
“Crusoe Cloud has renewed its SOC 2 Type II attestation, now covering both our AI Cloud Infrastructure-as-a-Service and Managed AI Services, including Managed Inference. [...] This examination covered May 1, 2025 to April 30, 2026”
Read 2026-09-27 · official site
- Crusoe Cloud Platform Terms of Service - Crusoe Legal Center ↗
“(vii) to transmit, store, or process health information subject to United States HIPAA regulations.”
Read 2026-09-27 · official site
- Data Processing and Security Terms - Crusoe Legal Center ↗
“Subject to Crusoe’s data location commitments under the Service Specific Terms and to the remainder of Data Transfers, Customer Data may be processed in any country in which Crusoe or its Subprocessors maintain facilities.”
Read 2026-09-27 · official site
- Datadog Trust Center ↗
“PCI DSS TISAX VPAT EU AI Act IRAP SOC 2 Type 2”
Read 2026-09-14 · official site
- Trust Platform Certification Reports and Resources | DigitalOcean ↗
“DigitalOcean maintains a SOC 2 Type II and SOC 3 Type II certification, issued by our independent auditor, Schellman & Company.”
Read 2026-09-13 · official site
- HIPAA at DO | DigitalOcean Trust Platform ↗
“The Company undergoes an annual risk assessment, performed by our external auditors, to attest to our adherence to HIPAA, the HIPAA Security Rule, and the HITECH Breach Notification Requirements. [...] Please contact your DigitalOcean sales representative to execute a BAA. [...] HIPAA Eligible Products”
Read 2026-09-13 · official site
- GDPR at DO | DigitalOcean Trust Platform ↗
“We support customers' data sovereignty rights by offering data centers in Amsterdam, Frankfurt, and London. [...] Customers are responsible for selecting the data center location that best meets their compliance needs when they open their accounts.”
Read 2026-09-13 · official site
- Security | DigitalOcean ↗
“DigitalOcean is AICPA SOC 2 Type II and SOC 3 Type II certified.”
Read 2026-09-21 · official site
- Doppler Security ↗
“Doppler is SOC 2 certified, ensuring your API keys, credentials, and secrets are stored with industry-leading security standards.”
Read 2026-09-11 · official site
- Doppler Data Processing Addendum ↗
“Doppler agrees to abide by and process such data in compliance with the EU SCCs and UK International Data Transfer Addendum, as applicable, which are incorporated herein in full and form an integral part of this Addendum. [...] Last Updated: July 07, 2026”
Read 2026-09-13 · official site
- Security FAQs — DreamHost Knowledge Base ↗
“Is DreamHost HIPAA compliant? [...] DreamHost is not HIPAA compliant.”
Read 2026-09-13 · official docs
- Customer Data Processing Addendum — DreamHost ↗
“Company may transfer and Process Customer Data anywhere in the world where Company, its Affiliates or its Sub-processors maintain Processing operations. [...] the parties acknowledge that Company shall be deemed to provide adequate protection (within the meaning of Applicable Data Protection Law) for any such Customer Data by complying with the Model Clauses.”
Read 2026-09-13 · official site
- Is DreamHost PCI compliant? — DreamHost Knowledge Base ↗
“DreamHost is PCI compliant. However, this only applies to DreamHost's [...] servers. DreamHost's PCI compliance does not cover”
Read 2026-09-13 · official docs
- Elastic Cloud Security | Elastic ↗
“have been audited by Coalfire under the SOC 2 Type 2 framework. Customers can request a SOC 2 report through the Elastic Trust Center”
Read 2026-09-13 · official site
- Trust Center | Elastic ↗
“FedRAMP High FedRAMP Moderate PCI DSS CSA STAR ISO/IEC 27001 ISO/IEC 27017 ISO/IEC 27018 SOC 2 SOC 3 TISAX HIPAA”
Read 2026-09-13 · official site
- Enterprise Grade Data Security and Compliance | Estuary ↗
“Estuary is SOC 2 Type II certified with zero exceptions and HIPAA-compliant.”
Read 2026-09-21 · official site
- Compliance | Fastly ↗
“Fastly is audited against the Trust Service Criteria for Security and Availability as established by the AICPA [...] If you are a Fastly customer, you can request these audit reports via your customer success point of contact.”
Read 2026-09-13 · official site
- Security - Fathom Analytics ↗
“Data Isolation GDPR compliance out of the box”
Read 2026-09-21 · official site
- Trust center | Fern ↗
“SOC 2 Type II GDPR CCPA Request access [...] Documents SOC 2 Type II Report”
Read 2026-10-25 · official site
- Privacy policy | Fern ↗
“The personal information we collect is stored and/or processed in United States, or where we or our partners, affiliates, and third-party providers maintain facilities.”
Read 2026-10-25 · official site
- Privacy and Security in Firebase ↗
“All Firebase services have successfully completed the ISO 27001 and SOC 1, SOC 2, and SOC 3 evaluation process [...] Compliance reports and certificates for Firebase services governed by the GCP Terms of Service may be requested via the Compliance Reports Manager.”
Read 2026-09-25 · official site
- Fivetran Security ↗
“SOC 1 & SOC 2 Auditing procedures ensure security and management of data.”
Read 2026-09-15 · official site
- WP Engine's Security Environment ↗
“WP Engine has a SOC2 Type II, SOC3 reports, and an ISO 27001:2022 certification available. Please reach out to your Account Manager or WP Engine Sales for more information.”
Read 2026-09-13 · official docs
- Flywheel and GDPR ↗
“Processes for GDPR requests: We set up our internal infrastructure to ensure all GDPR-related data requests can be responded to and handled appropriately. [...] We updated our GDPR-compliant Data Protection Addendum (“DPA”), and made it available for you here”
Read 2026-09-13 · official docs
- Flywheel and PCI-DSS Compliance ↗
“Flywheel meets PCI-DSS requirements for sites that don’t process, handle, or store credit card data. [...] It’s impossible for any web hosting company, Flywheel included, to be PCI-compliant. [...] PCI-DSS compliance is the responsibility of the site owner”
Read 2026-09-13 · official docs
- Gcore Trust Center ↗
“ISO 27001:2022 PCI-DSS 4.0 SOC 2 Type 1 GDPR [...] SOC 2 type 1 report”
Read 2026-09-27 · official site
- Security Infrastructure and Compliance | Gcore ↗
“Gcore complies with all GDPR requirements, both with respect to personal data stored by our customers and with respect to customer data.”
Read 2026-09-27 · official site
- Security as a company value | Policies | GitBook Documentation ↗
“GitBook Inc. successfully completed the AICPA Service Organization Control (SOC) 2 Type II audit. The audit confirms that GitBook Inc.’s information security practices, policies, procedures, and operations meet the SOC 2 standards for security. GitBook Inc. was audited by Prescient Assurance”
Read 2026-10-25 · official docs
- Security FAQ | Policies | GitBook Documentation ↗
“Customer data is stored in U.S. data centers. Some data (HTML pages & assets) may be cached in other geographies by our CDN.”
Read 2026-10-25 · official docs
- Accessing compliance reports for your enterprise - GitHub Enterprise Cloud Docs ↗
“Enterprise owners can access compliance reports for the enterprise. [...] SOC 1, Type 2 SOC 2, Type 2 Cloud Security Alliance CAIQ self-assessment (CSA CAIQ - Level 1)”
Read 2026-09-13 · official docs
- About GitHub Enterprise Cloud with data residency - GitHub Enterprise Cloud Docs ↗
“By default, GitHub stores data for GitHub.com in the USA. [...] The available regions are: EU (includes Azure regions in EFTA countries, currently Norway and Switzerland) Australia US Japan”
Read 2026-09-13 · official docs
- Hosted Architecture — Documentation | GlitchTip ↗
“adhering to principles found in HIPAA, SOC II, and ISO 27001 frameworks”
Read 2026-09-13 · official docs
- HIPAA Compliance | GlitchTip ↗
“BAAs are available on our Large plan. [...] BAAs are currently available only for the US instance (app.glitchtip.com) hosted on DigitalOcean NYC1.”
Read 2026-09-13 · official site
- SOC 2: compliance | Google Cloud ↗
“Google Cloud regularly undergoes third-party audits for our products, systems, and infrastructure related to this standard. [...] The core Google Cloud and Google Workspace SOC 2 Type II reports are issued quarterly”
Read 2026-10-17 · official site
- ISO/IEC 27001 - Compliance | Google Cloud ↗
“The Google Cloud Services ISMS has received an accredited ISO/IEC 27001 certification after undergoing an audit by an independent third party.”
Read 2026-10-17 · official site
- PCI DSS - Compliance | Google Cloud ↗
“The following Google Cloud services have been reviewed by an independent Qualified Security Assessor and determined to be PCI DSS 4.0.1 compliant. [...] Cloud VPN Cloud Workstations Compute Engine Config Connector”
Read 2026-10-17 · official site
- HIPAA Compliance on Google Cloud ↗
“Covered Products [...] The Google Cloud BAA covers Google Cloud's entire infrastructure [...] and the following products: [...] Pub/Sub [...]”
Read 2026-09-12 · official site
- SOC 2: compliance — Google Cloud ↗
“Google Cloud regularly undergoes third-party audits for our products, systems, and infrastructure related to this standard. [...] The core Google Cloud and Google Workspace SOC 2 Type II reports are issued quarterly”
Read 2026-09-13 · official site
- ISO/IEC 27001 - Compliance — Google Cloud ↗
“The Google Cloud Services ISMS has received an accredited ISO/IEC 27001 certification after undergoing an audit by an independent third party.”
Read 2026-09-12 · official site
- HIPAA Compliance on Google Cloud ↗
“Covered Products [...] The Google Cloud BAA covers Google Cloud's entire infrastructure [...] and the following products: [...] Cloud Run [...]”
Read 2026-09-12 · official site
- PCI DSS - Compliance — Google Cloud ↗
“Google Cloud undergoes at least an annual third-party audit to certify individual products against the PCI DSS.”
Read 2026-09-12 · official site
- Trust Center ↗
“Compliance SOC 2 ISO/IEC 27001 ISO/IEC 27001 SoA ISO 22301 PCI DSS v4.0.1 GDPR”
Read 2026-09-13 · official site
- Enterprise Grade Security | Hasura Cloud ↗
“Hasura Cloud is HIPAA Compliant”
Read 2026-09-21 · official site
- Security - Hatchet Documentation ↗
“Hatchet is SOC 2 Type II, HIPAA, and GDPR compliant. Company-level security practices, compliance reports, and security documentation are available at the Hatchet Trust Center .”
Read 2026-09-13 · official docs
- Heroku Security Policy ↗
“SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)”
Read 2026-09-21 · official site
- Hevo Security ↗
“SOC 2 Type II Hevo is certified by AICPA independent auditors for all five trust services criteria”
Read 2026-09-15 · official site
- Hostinger Trust Center ↗
“Hostinger is an ISO/IEC 27001:2022 certified hosting provider”
Read 2026-09-13 · official site
- PCI and HIPAA compliance on Hostinger hosting plans ↗
“Hostinger hosting plans are best suited for general website and application hosting [...] Hostinger hosting plans are not designed to meet PCI (Payment Card Industry) or HIPAA (Health Insurance Portability and Accountability Act) compliance standards”
Read 2026-09-13 · official docs
- Privacy policy ↗
“All personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 [...] Some of our servers are located outside EU or European Economic Area (EEA), such as US, Brazil, Singapore, Indonesia [...] which comply with the European Commission approved standard contractual clauses for data transfers”
Read 2026-09-13 · official site
- Hostinger Trust Center - Knowledge Base (FAQ) ↗
“Is your organization compliant with SOC 2? [...] Hostinger is not SOC 2 certified. However, we are certified under ISO/IEC 27001:2022, an internationally recognized information security management standard.”
Read 2026-09-13 · official site
- What security measures Hostinger uses ↗
“Hostinger is ISO/IEC 27001:2022 certified. You can view the certificate in our Trust Center.”
Read 2026-09-13 · official docs
- Hostinger Data Processing Addendum ↗
“Module Two (Controller to Processor) EU Standard Contractual Clauses or Module Three (Processor to Processor) EU Standard Contractual Clauses will apply to Customer Data that is transferred outside the EEA, either directly or via onward transfer, to any country not recognized by the European Commission as providing an adequate level of protection for Customer Data.”
Read 2026-09-13 · official site
- Secure By Design — Hyperstack ↗
“We have achieved SOC 2 Type 2, an independent attestation of our security controls. [...] SOC 2 Type 2 achieved via NexGen Cloud, our parent company [...] SOC 2 Type I Certified SOC 2 Type II Attested”
Read 2026-10-17 · official site
- Combining Images, Data and Intelligence to Transform Your Business ↗
“SOC 2 Compliant Docs Service status Policies”
Read 2026-09-21 · official site
- Infisical Trust Center ↗
“Infisical's Trust Center Request access [...] Infisical Inc. – SOC 2 Type 2 Report”
Read 2026-09-13 · official site
- Data Processing Agreement | Infisical ↗
“the EU General Data Protection Regulation (Regulation (EU) 2016/679) ( “EU GDPR” ), the UK General Data Protection Regulation [...] Company will comply using a recognized mechanism, including the SCCs, the UK Addendum, the Swiss modifications to the SCCs, or any other lawful transfer mechanism recognized under Applicable Privacy Law”
Read 2026-09-13 · official site
- Security | Inngest ↗
“Inngest is SOC 2 Type II compliant. [...] Read our announcement , request a copy of the report or contact us for additional questions.”
Read 2026-09-13 · official site
- Inngest is SOC 2 Type II compliant - Inngest Blog ↗
“We are also exploring additional certifications, such as ISO 27001, to further demonstrate our commitment to security and privacy.”
Read 2026-09-13 · official site
- Pricing | Inngest ↗
“Dedicated slack channel Direct P0 support from our team HIPAA BAAs for healthcare compliance Add-on”
Read 2026-09-13 · official pricing
- Inngest Cloud Architecture | Scheduling & Execution - Inngest Docs ↗
“Inngest Cloud runs across two nearby infrastructure footprints in the eastern United States: [...] AWS us-east-2 (Ohio) hosts customer-facing APIs, control plane services, and supporting data services. [...] Inngest-operated bare metal in Ashburn, Virginia hosts the primary run scheduling and function execution data plane”
Read 2026-09-13 · official docs
- VPS Hosting | Virtual Private Servers | Starting at $4/month ↗
“Security Wildcard SSL certificate High-performance data centers ISO 27001 certified [...] IONOS is ISO 27001 certified and independently audited to enterprise-level security standards.”
Read 2026-09-25 · official site
- The Kamatera Cloud Network | Kamatera Data Centers ↗
“Our data centers operate according to the highest global standards AICPA – SOC 2 – TYPE II compliant or better data center”
Read 2026-09-25 · official site
- Managed Cloud Services | Kamatera ↗
“Our solutions also provide a range of compliance options, including HIPAA, PCI, and GDPR, which enable organizations to meet regulatory requirements and enhance data security.”
Read 2026-09-25 · official site
- GDPR and Data Processing | Kamatera ↗
“Customer may select the datacenters locations as offered by KAMATERA where Customer Data will be processed. Once Customer has made its choice, KAMATERA will not transfer Customer Data from Customer’s selected locations, except as necessary to provide the Services initiated by Customer, or as specifically required by the Customer, or as necessary to comply with applicable law.”
Read 2026-09-25 · official site
- Network - KeyCDN ↗
“Stringent security and compliance standards to keep data safe (ISO 27001).”
Read 2026-09-13 · official site
- GDPR - KeyCDN ↗
“KeyCDN customers typically act as data controllers, whereas KeyCDN acts as the data processor. [...] you are required by law to complete a data processing agreement (DPA). Please open a support request to receive the agreement. [...] Client IP addresses are anonymized within the content delivery logs provided.”
Read 2026-09-13 · official site
- Compliance - Kinde docs ↗
“Kinde has completed a SOC 2 Type 2 with report and attestation from AssuranceLab [...] Access to the full SOC 2 report is included in our paid plans (Pro, Plus, and Scale) but is not currently available on the Free plan.”
Read 2026-09-13 · official docs
- Security at Kinde - Kinde docs ↗
“has an attestation for SOC 2 Type 2 and HIPAA, and are GDPR compliant [...] Data is stored in the region you selected during sign up of our product. Currently the available regions are Sydney, Australia; Dublin, Ireland; Oregon, USA; London, UK; and Quebec, Canada. [...] The only data replicated between regions is backend business metadata”
Read 2026-09-13 · official docs
- Service Information - SOC 2 - Kinsta® Docs ↗
“BARR Advisory is Kinsta’s auditor, and Vanta is our GRC (Governance, Risk Management, and Compliance) Management Software. [...] A Type II report (the type of report we have at Kinsta) assesses the effectiveness of those security measures over a period of time.”
Read 2026-09-13 · official docs
- Kinsta Trust Center ↗
“ISO 27001:2022 ISO 27017 ISO 27018 SOC 2 Type II CSA STAR Level 1 GDPR CCPA [...] SOC 2 Type II ISO 27001 Certificate ISO 27017 Certificate ISO 27018 Certificate”
Read 2026-09-13 · official site
- Reference - Technical FAQ - Kinsta® Docs ↗
“Kinsta does not offer a HIPAA-compliant hosting product, and we do not enter into Business Associate Agreements (BAAs) with our customers. [...] You should not store or transmit protected health information (PHI) on Kinsta”
Read 2026-09-13 · official docs
- Kinsta Inc. Data Processing Addendum - Kinsta® ↗
“You may select the data center regions where your Customer Applications will be hosted. Notwithstanding Customer’s data center region, certain aspects of the Services may require International Transfers.”
Read 2026-09-13 · official site
- Trust | Lambda ↗
“SOC 2 Type II attestation. ISO 27001, 27017, 27701, and 22301 certified. Strict access controls, MFA, continuous monitoring.”
Read 2026-10-17 · official site
- Terms of Service | Lambda ↗
“These Platform Guidelines are intended to be read together with Lambda's Cloud Terms of Service [...] (x) submit any sensitive personal data or information to the Services (including government issued identification numbers, financial account information, payment card information, and personal health information) to the Services”
Read 2026-10-17 · official site
- Privacy Policy | Lambda ↗
“We rely primarily on the European Commission's Standard Contractual Clauses to facilitate the international and onward transfer of personal information collected in the European Economic Area ("EEA"), the United Kingdom and Switzerland [...] Pursuant to the European Union's General Data Protection Regulation, the UK General Data Protection Regulation (collectively, the "GDPR")”
Read 2026-10-17 · official site
- Leaseweb Security & Certifications ↗
“SOC1 SOC1 Type 2 SOC1 Type 2 SOC1 Type 2 SOC1 Type 2 SOC1 Type 2 SOC2 SOC2 Type II [...] LEASEWEB SINGAPORE PTE. LTD. LEASEWEB CANADA, INC.”
Read 2026-09-27 · official site
- Leaseweb Sovereignty ↗
“Leaseweb allows you to store data within your region, governed by local laws. While we apply the principles of GDPR wherever possible, local legal frameworks, such as in Canada, Singapore, the US, Australia, or Japan, determine the actual compliance requirements.”
Read 2026-09-27 · official site
- Disk encryption | Akamai Cloud TechDocs ↗
“In addition to Akamai's information security compliance with standards such as SOC 2, disk encryption provides further protections by keeping data encrypted”
Read 2026-09-13 · official docs
- Akamai Information Security Compliance Programs ↗
“Compute Dedicated CPU Plans Shared CPU Plans High Memory Plans GPU Plans Linode Kubernetes Engine”
Read 2026-09-15 · official site
- Akamai Global Infrastructure | Akamai ↗
“Teams start in core sites for full-stack scale and centralized control, then extend into distributed sites when they need to place workloads closer to users for lower latency, or within specific geographies to meet data residency and regulatory requirements.”
Read 2026-09-13 · official site
- Security | Liveblocks ↗
“Liveblocks is SOC 2 Type II compliant.”
Read 2026-09-21 · official site
- Mailgun’s Commitment to Security and Compliance | Mailgun ↗
“In addition to our partnership with an industry-leading hosting provider, Sinch Mailgun is SOC 2 Type II and ISO/IEC 27001 Certified, as well as GDPR compliant .”
Read 2026-09-21 · official site
- Security & Privacy - Email Marketing - SMTP services | Mailjet ↗
“We are proud to announce our complete implementation of all GDPR’s rigid requirements.”
Read 2026-09-21 · official site
- MemCachier Security ↗
“MemCachier utilizes ISO 27001 and SOC 2 certified data centers managed by Amazon and DigitalOcean.”
Read 2026-09-13 · official site
- MemCachier Privacy Policy ↗
“To the extent that you provide us with the personal information of residents of the European Union that is subject to European data protection laws, we agree to comply with the requirements of such laws. As required, MemCachier will enter into a data protection addendum incorporating standard contractual clauses”
Read 2026-09-13 · official site
- Mintlify Trust Center ↗
“SOC 2 Type 2 Report [...] ISO 27001 Letter of Intent”
Read 2026-10-25 · official site
- Plans and Pricing — Modal ↗
“eering services Security SOC 2 compliance HIPAA compatibility Audit logs Static IP proxy RBAC SSO Frequently asked questions How does server”
Read 2026-09-17 · official pricing
- MotherDuck: Trust and Security ↗
“MotherDuck has successfully completed its SOC 2 Type II attestation.”
Read 2026-09-21 · official site
- Trust center ↗
“SOC 2 Type II With HIPAA. Evaluates the design and operational effectiveness of the controls. SOC 3 SOC 3 is a summarized version of the SOC 2 Type II audit, designed for public consumption.”
Read 2026-09-27 · official site
- Nebius HIPAA Implementation Guideline - Nebius AI Cloud ↗
“Use of Nebius products with Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is subject to a signed Business Associate Agreement (BAA) [...] Object Storage Yes Approved Nebius AI Cloud service for persistent storage of ePHI Compute Instances Yes, transient processing only”
Read 2026-09-27 · official docs
- Neon Security ↗
“Neon undergoes annual SOC 2 Type II audits performed by accredited independent third party auditors.”
Read 2026-09-12 · official site
- Trust Center | NetBird ↗
“ISO 27001 - Official Certificate”
Read 2026-09-22 · official site
- Security — Netlify ↗
“Netlify undergoes rigorous annual audits and certifications by independent third-party auditors, meeting industry-leading security standards such as AICPA SOC 2 Type 2, ISO 27001, ISO 27018, PCI DSS v4.0, and HIPAA. Enterprise customers can access detailed audit reports, including our SOC 2 Type 2 attestation, in the Trust Center”
Read 2026-09-14 · official site
- Nhost Pricing ↗
“team collaborate with added support, scale as needed. from $599 / month $15 in compute credits included everything in pro plus: soc 2 type ii email support sla dedicated discord channel”
Read 2026-09-14 · official pricing
- Security at Nhost | Nhost ↗
“Nhost is working towards HIPAA compliance.”
Read 2026-09-21 · official site
- Pricing | Nile Database ↗
“1 week Global placement Coming soon 2 regions SOC 2 Coming soon [...] SOC 2 Coming soon - Auth Number of active users”
Read 2026-09-13 · official pricing
- Introducing: SaaS Anywhere on Postgres - for Speed and Compliance ↗
“We started with us-west-2 (Oregon) and you now have the option to also provision a database in eu-central-1 (Frankfurt). [...] There are many regions with strict data residency regulations: EU, UK, parts of Canada, Japan, Australia [...] Having databases in the relevant regions make this a lot simpler and safer.”
Read 2026-09-13 · official site
- OpenObserve Trust Center ↗
“OpenObserve has Attained ISO 27001 Compliance”
Read 2026-09-13 · official site
- Enterprise Features | OpenObserve Docs ↗
“Enterprise tier includes all standard features plus the following enterprise-specific capabilities. [...] encryption and compliance support for HIPAA and PCI.”
Read 2026-09-13 · official docs
- Security & Compliance | OpenObserve ↗
“Customers select among the storage regions available for their service, as reflected in their order or deployment configuration. OpenObserve does not relocate stored Customer Data to another region without customer instructions or agreement.”
Read 2026-09-13 · official site
- Learn About Security in Oracle Cloud Infrastructure | Oracle Help Center ↗
“Infrastructure services are compliant with a wide range of standards and requirements, including FedRAMP, FIPS 140-2, GDPR, HIPAA, PCI DSS, and SOC 1/2/3.”
Read 2026-09-25 · official docs
- Kubernetes Engine (OKE) and Kubernetes Concepts | Oracle Cloud Infrastructure Documentation ↗
“OKE uses versions of Kubernetes certified as conformant by the Cloud Native Computing Foundation (CNCF). OKE is itself ISO-compliant (ISO-IEC 27001, 27017, 27018).”
Read 2026-09-25 · official docs
- Oracle EU Sovereign Cloud | Oracle Cloud Infrastructure Documentation ↗
“The isolation of the Oracle EU Sovereign Cloud realm from the commercial public cloud realm allows Oracle to restrict support and operations personnel to EU residents [...] Oracle EU Sovereign Cloud offers cloud regions that are located only within the geographic boundaries of the EU.”
Read 2026-09-25 · official docs
- SSAE 18 Type 2 SOC 1, SOC 2 + NIST, and SOC 3 Attestations ↗
“The two Trust Service Categories in scope for the OVHcloud Type 2 SOC 2 are the following Security [...] The scope of the SSAE 18 Type 2 SOC 1, 2, & 3 examinations is the OVHcloud Services and US Data Centers: Services: Bare Metal Cloud Virtual Private Cloud Hosted Private Cloud Public Cloud US Data Centers: Vint Hill, Virginia (East Coast) Hillsboro, Oregon (West Coast)”
Read 2026-09-27 · official site
- ISO/IEC 27001, 27017 and 27018 certifications | OVHcloud Worldwide ↗
“ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018 certifications are available for OVHcloud services hosted in all our datacentres, except those in the US, which have a specific scope [...] Managed Kubernetes® Service AI & machine learning Data Processing (Spark) Logs Data Platform VPS (virtual private servers)”
Read 2026-09-27 · official site
- HIPAA and HITECH certification ↗
“Our data centers in Vint Hill (Virginia) and Hillsboro (Oregon) are HIPAA- and HITECH-compliant. [...] The scope of the Type 1 HIPAA attestation is the OVHcloud Services and US Data Centers: Services: Bare Metal Cloud Virtual Private Cloud Hosted Private Cloud Public Cloud”
Read 2026-09-27 · official site
- OVHcloud VPS FAQ - OVHcloud Documentation ↗
“Hosting your VPS with OVHcloud in France or generally within the EU offers advantages such as competitive pricing and reinforced data protection. Your service is not subject to the US CLOUD Act, shielding it from non-European interference. [...] It is not possible to migrate a VPS from one location to another, whether to another data centre, another country, or another continent”
Read 2026-09-27 · official docs
- PCI DSS certification - financial data hosting ↗
“The scope of the PCI DSS Attestation is the OVHcloud Services and US Data Centers: Services: Bare Metal Cloud Hosted Private Cloud US Data Centers: Vint Hill, Virginia (East Coast) Hillsboro, Oregon (West Coast)”
Read 2026-09-27 · official site
- Sales Tax Compliance Software | Paddle ↗
“Paddle is PCI DSS SAQ A compliant - this means that we do not directly store card information and are PCI Compliant for web transactions only.”
Read 2026-09-22 · official site
- Security at PagerDuty | PagerDuty ↗
“PagerDuty has successfully completed SOC 2 Type II examinations for our various Services.”
Read 2026-09-21 · official site
- Paperspace Security ↗
“Datacenters are individually audited, meeting SOC 1, SOC 2, PCI-DSS and ISO 27001 compliance standards.”
Read 2026-09-27 · official site
- Pinecone Enterprise - Trusted Knowledge Infrastructure ↗
“SOC 2 Type II Annual audits. Controls for security, availability, and confidentiality.”
Read 2026-09-13 · official site
- Pinecone Trust and Security Center ↗
“We are thrilled to announce that Pinecone has successfully completed our annual ISO 27001:2022 surveillance audit, ensuring our certification remains fully active!”
Read 2026-09-13 · official site
- Pinecone Master Subscription Agreement ↗
“Customer must not use the Services to process any Restricted Information. [...] “ Restricted Information ” means the following categories of Personal Information: (a) patient, medical, or other protected health information regulated by the U.S. Health Insurance Portability and Accountability Act (“ HIPAA Information ”); (b) credit, debit, bank account, or other financial account numbers”
Read 2026-09-13 · official site
- Pirsch Analytics ↗
“Privacy-friendly web analytics made and hosted in Germany [...] powerful, cookie-free, and fully compliant with GDPR, CCPA, and PECR.”
Read 2026-09-15 · official site
- Plausible Analytics ↗
“Made and hosted in the EU, powered by European-owned infrastructure.”
Read 2026-09-15 · official site
- Security | Plivo ↗
“Plivo is certified compliant with PCI DSS Level 1.”
Read 2026-09-21 · official site
- Postmark Security ↗
“our compliance, data protection, and information security teams all worked to prepare our services for GDPR.”
Read 2026-09-12 · official site
- Datacenter Certifications And Regulatory Compliance | Pressable ↗
“Pressable utilizes multiple datacenters around the world, each with at least [...] SOC 2 Type 2 compliance [...] The available compliance report for each datacenter is as follows:”
Read 2026-09-13 · official docs
- Is Pressable HIPAA Compliant? | Pressable ↗
“Pressable is not HIPAA compliant and standard form solutions (e.g. GravityForms, WPForms, NinjaForms) should not be used in conjunction with”
Read 2026-09-13 · official docs
- The General Data Protection Regulation (GDPR) | Pressable ↗
“Pressable is committed to operating in accordance with the principles of the GDPR. We are making a number of upgrades to our systems and policies, in line with the requirements of the new law. [...] We are happy to enter into a Data Protection Agreement with you, which should address your GDPR related legal and compliance requirements.”
Read 2026-09-13 · official site
- Pressable vs. Kinsta ↗
“Pressable’s hosting adheres to many necessary compliance regulations (PCI-DSS, GDPR) and enterprise accounts receive dedicated, expert account managers and support.”
Read 2026-09-13 · official site
- Trust Center - ProsperOps, a Flexera company ↗
“ProsperOps SOC 2 Type II Report”
Read 2026-09-22 · official site
- Build, manage, & optimize real-time apps at scale | PubNub ↗
“with user status, full featured chat and push notifications, all with HIPAA compliance”
Read 2026-09-21 · official site
- PubNub Privacy Policy | PubNub ↗
“PubNub complies with the provisions of the Regulation (EU) 2016/679 of the European Parliament, known as the General Data Protection Regulation (GDPR).”
Read 2026-09-21 · official site
- Pulumi Security | Pulumi ↗
“The Pulumi platform employs industry best practices for security and is SOC 2 Type II certified.”
Read 2026-09-21 · official site
- Security | Pusher ↗
“Our security program, management system, controls and the implementation of those are audited at least twice per year by an independent and qualified third party, evidenced by the valid ISO27001:2013 certificate.”
Read 2026-09-21 · official site
- ReadMe's Trust Center ↗
“Compliance SOC 2 Type II GDPR HIPAA WCAG 2.1 [...] Reports ReadMe - SOC 2 Type II”
Read 2026-10-25 · official site
- Security ↗
“API request and key data is stored indefinitely in an Amazon Web Services (AWS) facility in Virginia (USA).”
Read 2026-10-25 · official docs
- Redis Technical and Organizational Security Measures — Redis Legal Hub ↗
“At least annually, an independent, reputable, third-party firm will investigate and prepare a SSAE 18 Type II, specifically a SOC 2 Type II, compliance report and certification based on such investigations [...] Upon your written request, Redis will make a copy of this report available to you”
Read 2026-09-13 · official site
- Redis Trust Center — Certifications & Compliance, ISO/IEC 27001 ↗
“ISO 27001 Certificate [...] ISO 27001:2022 works to establish, implement, maintain, and continually improve an ISMS, ensuring the confidentiality, integrity, and availability of information assets at Redis.”
Read 2026-09-13 · official site
- Redis Trust Center — Certifications & Compliance, HIPAA ↗
“Redis offers a HIPAA-compliant business associate agreement (BAA) for our HIPAA-secure Redis Cloud services.”
Read 2026-09-13 · official site
- Data Processing Addendum — Redis Legal Hub ↗
“standard contractual clauses for the transfer of personal data to third countries pursuant to the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 [...] Customer controls the geographic regions in which Personal Data resides when configuring the Services.”
Read 2026-09-13 · official site
- Redis Trust Center — Certifications & Compliance, PCI DSS ↗
“Redis Cloud Flexible/Annual subscriptions is authorized to process, store, and transmit credit card information for our customers. Redis has been assessed as a Level 1 Service Provider against the PCI DSS 4.0.1 standard.”
Read 2026-09-13 · official site
- Security at Redocly ↗
“SOC 2 Type II Redocly has completed the System and Organization Controls (SOC) 2, Type II audit. Log in to download this and other reports.”
Read 2026-10-25 · official site
- Data Processing Addendum ↗
“Redocly may transfer and process Customer Data to and in the United States and anywhere else in the world where Redocly, its Affiliates or its Sub-processors maintain data processing operations.”
Read 2026-10-25 · official site
- Resend Security ↗
“Resend is SOC 2 Type II compliant. The audit was completed by Vanta & Advantage Partners.”
Read 2026-09-12 · official site
- SSAE16 / SAS70 Compliant Cloud Storage ↗
“both of our US locations (San Diego, California and Denver, Colorado) are SSAE16 certified with zero exceptions”
Read 2026-09-15 · official docs
- rsync.net - Your PHI Partner ↗
“rsync.net will enter into a Business Associate Agreement (BAA) with your firm”
Read 2026-09-15 · official docs
- rsync.net - GDPR Compliance ↗
“your data never leaves the geographic location that you have chosen”
Read 2026-09-15 · official docs
- PCI Compliance ↗
“we do, in fact, update our PCI compliance quarterly and are happy to provide overall and site-specific PCI Compliance documentation”
Read 2026-09-15 · official docs
- AI Infrastructure Security & Compliance | Runpod ↗
“Runpod has also completed SOC 2 Type II and SOC 3 examinations, and maintains HIPAA and GDPR programs. [...] The Runpod Trust Center lists current compliance resources, including the ISO/IEC 27001:2022 certificate, SOC 2 Type II, SOC 3, HIPAA, GDPR, and the SOC 2 Bridge Letter 2026. Some documents require approved access before download.”
Read 2026-10-17 · official site
- Data security and legal compliance - Runpod Documentation ↗
“Runpod is fully compliant with the General Data Protection Regulation (GDPR) for data processed in European data center regions. [...] For servers hosted in GDPR-compliant regions like the European Union, Runpod maintains clear procedures for the collection, storage, processing, and deletion of personal data.”
Read 2026-10-17 · official docs
- Security ↗
“SOC 2 report: Scalar has received a SOC 2 Type 1 report for controls relevant to security.”
Read 2026-10-25 · official site
- ScaleGrid SOC 2 Type II Audited Controls ↗
“ScaleGrid’s SOC 2 Type II audit focused on the Security trust service criterion and evaluated the effectiveness of our Security controls and operational practices over time. The audit was conducted by independent audit firm Insight Assurance. [...] Customers and prospective customers may request access to ScaleGrid’s SOC 2 Type II report and supporting security documentation through the request form on this page.”
Read 2026-09-13 · official site
- ScaleGrid Enterprise: Fully Managed DB Hosting On-premises | BYOC ↗
“Enterprise support packages, installation & training, documentation, HIPAA & PCI compliance”
Read 2026-09-13 · official site
- Data Processing Addendum (DPA) | ScaleGrid ↗
“ScaleGrid is located in the United States and to the extent any processing of Personal Data of Data Subjects located in the EEA by ScaleGrid takes place in any country outside the EEA (other than exclusively in an Adequate Country), there must be a lawful basis for this transfer as required by the Data Protection Legislation.”
Read 2026-09-13 · official site
- Security & Data FAQ ↗
“The scalr.io platform and all processes surrounding the Scalr platform are governed by SOC2 type 2 controls.”
Read 2026-09-21 · official site
- Data Processing Agreement - Seline Analytics ↗
“Application servers, ClickHouse, and Postgres databases run on Hetzner infrastructure in Germany.”
Read 2026-10-26 · official site
- Sentry Security ↗
“Sentry has obtained the following compliance certifications: SOC2 Type I SOC2 Type II [...] Sentry's SOC 2 report and ISO 27001 certificate are available to customers via their Sentry account or upon request.”
Read 2026-09-14 · official site
- SigNoz Cloud | SigNoz Docs ↗
“Enterprise Ready: SOC2 Type 2 compliant, SSO support, and granular access control.”
Read 2026-09-13 · official docs
- Security - Simple Analytics ↗
“We are working toward SOC 2 Type II certification”
Read 2026-09-21 · official site
- Simple Analytics Pricing ↗
“No cookies, no consent banners, no personal data EU-hosted and compliant by design”
Read 2026-09-15 · official pricing
- SimpleBackups Pricing ↗
“ISO/SOC2 compliance”
Read 2026-09-15 · official pricing
- SimpleBackups: Server, Database and SaaS Backup ↗
“ISO 27001 certified and GDPR compliant, with the backup evidence a SOC 2 or HIPAA program has to produce.”
Read 2026-09-21 · official site
- Enhanced Protection Against WordPress Vulnerabilities with SiteGround Security Plugin Preinstalled ↗
“Is SiteGround ISO27001 certified? [...] All our hosting accounts are built on GCP. Although we are not certified, the Google services that we use are.”
Read 2026-09-13 · official site
- New SiteGround Email Marketing tool to boost your business growth - SiteGround blog ↗
“Currently, our hosting services, including our new Email Marketing Tool, are not HIPAA compliant.”
Read 2026-09-13 · official site
- SiteGround Data Processing Agreement - Terms of Service ↗
“The customer may specify, subject to availability, the data center location where its hosting account content will be stored [...] SiteGround may change these locations and move customer”
Read 2026-09-13 · official site
- SiteGround Web Hosting - Privacy Policy Details ↗
“When we transmit credit card data to our payment processors, the credit card data is subject to tokenization and strong security measures applied by our payment processors in accordance with the PCI DSS requirements.”
Read 2026-09-13 · official site
- Security Overview | Spacelift ↗
“SOC2 Type II certification performed by an independent external auditor confirms the effectiveness of internal controls in terms of Spacelift security, availability, processing integrity, confidentiality, and privacy of customer data.”
Read 2026-09-21 · official site
- Object storage compliance | Storj ↗
“Beyond SOC2, Storj also meets the critical requirements of GDPR, HIPAA, CJIS and MPA regulations for object storage compliance.”
Read 2026-09-21 · official site
- Twilio Security Overview ↗
“Certification or Attestation Covered Services ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018 Twilio Services, Segment Services SOC 2 Type 2 All Services [...] means any (a) services or application programming interfaces branded as “Twilio” and (b) cloud-based identity, authentication, and security platform, and related services, branded as “Stytch”.”
Read 2026-09-13 · official site
- Data compliance — Stytch Docs ↗
“Data Processing Agreement (DPA) : We offer a DPA that incorporates Standard Contractual Clauses (SCCs) for lawful cross-border data transfers. [...] Stytch self-certifies compliance with the Data Privacy Framework requirements for data transfers from the EU, United Kingdom, and Switzerland to the United States. [...] Because Stytch operates exclusively out of U.S. servers, achieving this level of rigid localization with their service is not possible.”
Read 2026-09-13 · official docs
- Supabase Security ↗
“Supabase is SOC 2 Type 2 compliant.”
Read 2026-09-12 · official site
- SuperTokens - Modular User Management Suite ↗
“SOC2 100+ controls and tests.”
Read 2026-09-13 · official site
- Security | Tailscale ↗
“Tailscale has completed a SOC 2 Type II certification, meeting AICPA's Trust Services Criteria for security, availability, and confidentiality.”
Read 2026-09-21 · official site
- Security & Trust at Telnyx - Enterprise-Grade Protection ↗
“ISO • PCI • HIPAA • GDPR • SOC2 Type II”
Read 2026-09-21 · official site
- Telnyx SMS API Pricing ↗
“$0 platform fee $0 support · hipaa 5 min to first call”
Read 2026-09-15 · official pricing
- Security | Temporal ↗
“Compliance Temporal Cloud is SOC 2 Type II certified, and compliant with GDPR and HIPAA regulations.”
Read 2026-09-13 · official site
- Temporal Data Processing Addendum - Annex 2, Technical and Organizational Security Measures ↗
“implementing an information security management program that is informed by the National Institute of Standards and Technology (NIST) Cybersecurity Framework. [...] Temporal Technologies ensures assurance of products and processes by conducting third party audits of the service according to the 2018 Description Criteria for a Description of a Service Organization's System in a SOC 2 Type II Report as issued by the American Institute of Certified Public Accountants.”
Read 2026-09-13 · official site
- Security model - Temporal Cloud | Temporal Documentation ↗
“Namespaces in the same environment are logically segregated. Namespaces do not share data processing or data storage across regional boundaries.”
Read 2026-09-13 · official docs
- Terms of Service - April 2025 | Temporal Technologies ↗
“Except for contact information consisting of first and last name, title and email address for which Customer has obtained necessary rights of access and use from the individual, Customer agrees not to submit other personal data or any sensitive personal information (including government issued identification numbers, financial account information, payment card information, and personal health information) to Temporal.”
Read 2026-09-13 · official site
- About security in Tiger Cloud | Tiger Data Docs ↗
“Tiger Cloud is SOC 2 Type 2 compliant. [...] The annual SOC 2 report is available to customers on the Scale or Enterprise pricing plans. Open a support ticket to get access to it.”
Read 2026-09-13 · official docs
- Security | Trigger.dev ↗
“Yes, Trigger.dev is SOC 2 Type II compliant. Visit our Security Portal for more information. Our latest report is available upon request for our Enterprise customers.”
Read 2026-09-13 · official site
- Security & Compliance ↗
“turbopuffer undergoes System and Organization Controls (SOC) 2 Type 2 audits of the design and operational effectiveness of security and availability controls. You can request a copy of the latest SOC 2 report and Penetration Test from our Trust Center”
Read 2026-09-13 · official docs
- turbopuffer terms of service ↗
“credit, debit, or other payment card data subject to the Payment Card Industry Data Security Standards [...] Customer must not use the Service with Prohibited Data or for High Risk Activities”
Read 2026-09-13 · official site
- BYOK Encryption - Turso Documentation ↗
“All databases are encrypted-at-rest at the volume level in the Turso Cloud, as part of our SOC2 standards. See our trust center for details.”
Read 2026-09-13 · official docs
- Turso is for Healthcare ↗
“Turso is HIPAA compliant We can provide HIPAA compliance BAA letter for Pro plan and Enterprise users upon request”
Read 2026-09-13 · official site
- Turso's Trust Center - FAQ ↗
“By creating a database that only spans locations in the European Union, your data will never leave the European Union. The exception are backups. Backups are stored in S3, in the us-east-2 region.”
Read 2026-09-13 · official site
- Data Centers | UpCloud ↗
“US-CHI1 Chicago, USA More info CoreSite [...] Certifications ISO 27001 Information security management PCI-DSS Information security SOC 1 Type II Internal controls related to financial reporting SOC 2 Type II Data security and privacy HIPAA NIST 800-53”
Read 2026-09-27 · official site
- Compliance & Security | UpCloud ↗
“ISO 27001 Certification As an integral part of our security framework, we have implemented an ISO 27001 certified Information Security Management System.”
Read 2026-09-27 · official site
- Security & Privacy | UpCloud Global ↗
“As our company is registered in Finland, we comply with the privacy and data protection laws and regulations of Finland and the European Union (EU). [...] As regards virtual servers deployed in our data centres located in the EU, we don’t use any subprocessors in the provision of the service. [...] The Customer Data is stored in the data centre which the customer selects through the service control panel. UpCloud doesn’t move the data from the selected data centre without the customer’s explicit request.”
Read 2026-09-27 · official site
- Cloud Servers FAQ | UpCloud Docs ↗
“Our data centres are certified for different requirements such as ISO9001, ISO27001, ISO14001, ISO14644-8, OHSAS 18001, PCI DSS, PAS 99, VAHTI T3 and KATAKRI.”
Read 2026-09-25 · official docs
- Uploadcare Pricing ↗
“enterprise-grade security enterprise-grade support hipaa and soc2 compliant dedicated solution architect private slack channel”
Read 2026-09-15 · official pricing
- Security and compliance | Uploadcare docs ↗
“data safe and secure: SOC 2, HIPAA, GDPR.”
Read 2026-09-21 · official site
- Prod Pack & Enterprise - Upstash Documentation ↗
“SOC-2 Type 2 controls apply at the platform level. Prod Pack adds customer-facing compliance support, including SOC-2 report access, contractual commitments, and audit-ready features such as encryption at rest, credential protection, and advanced monitoring.”
Read 2026-09-13 · official docs
- Compliance - Upstash Documentation ↗
“Is Upstash ISO-27001 Compliant? [...] We are in process of getting this certification.”
Read 2026-09-13 · official docs
- Managing Healthcare Data - Upstash Documentation ↗
“You can use Upstash Redis to store and process Protected Health Information (PHI). [...] Signing a Business Associate Agreement (BAA) with Upstash. This is provided as part of our Enterprise offering. [...] Enabling Prod Pack which provides encryption at rest and advanced security features”
Read 2026-09-13 · official docs
- Vantage Security and Compliance | Vantage ↗
“Vantage is SOC 1 Type 2 and SOC 2 Type 2 Compliant”
Read 2026-09-21 · official site
- Vercel Security ↗
“Yes, Vercel has a SOC 2 Type 2 attestation.”
Read 2026-09-12 · official site
- Vultr Trust Center - Vultr.com ↗
“To maintain a strong security posture, Vultr conducts quarterly penetration testing by certified ethical hackers (CEH/OSCP), real-time vulnerability scanning aligned with the NIST Cybersecurity Framework, and annual SOC 2+ Type II audits.”
Read 2026-09-22 · official site
- Wasabi: Cloud Storage Security ↗
“Wasabi's products and physical data center locations are ISO 27001 compliant.”
Read 2026-09-21 · official site
- Vector Database Pricing | Weaviate ↗
“SOC2 SOC 2 Type II independently audited via Drata. See our Trust Portal. [...] Is Weaviate Cloud SOC 2 / HIPAA compliant? + Yes. Weaviate Cloud is SOC 2 audited, and Enterprise Cloud on AWS is HIPAA compliant. See the Trust Portal for details.”
Read 2026-09-13 · official pricing
- Weaviate Data Processing Agreement | Weaviate ↗
“Weaviate maintains a formal Information Security Management System (ISMS) certified against ISO 27001, covering governance, risk management, and compliance functions.”
Read 2026-09-13 · official site
- WorkOS Security ↗
“SOC 2 Type 2 certified GDPR & CCPA compliant Annual 3rd-party security penetration tests External code audits”
Read 2026-09-14 · official site
- PCI DSS Certification | WorkOS ↗
“WorkOS is now PCI DSS (self-attested via SAQ-D). [...] This self-attestation demonstrates that WorkOS meets the PCI DSS requirements applicable to our services, supporting customers who operate in payment-regulated environments. Our attestation of compliance is available at our Trust Center, under Resources”
Read 2026-09-13 · official site
- Acceptable Use Policy - WP Engine ↗
“You are not permitted to use or cause the Services to store or process sensitive or otherwise regulated health or financial information, including Protected Health Information (as that term is defined under HIPAA), cardholder data protected under PCI DSS regulations (such as credit or debit card data), or other financial data (including any financial account details).”
Read 2026-09-13 · official site
- Change a Website Data Center Location | WP Engine Support ↗
“However, sometimes data privacy laws require sites to be located on servers in specific regions. [...] All shared plans are created by default on Google Cloud Services in the region closest to your location at signup. Your website can be migrated to another region by Support request.”
Read 2026-09-13 · official docs
- Configure PCI Compliance Settings | WP Engine Support ↗
“WP Engine does not store, process, or transmit cardholder data on our platform, and our Acceptable Use Policy prohibits you from doing the same. [...] WP Engine's Acceptable Use Policy prohibits you from using our Services to store, process, or transmit cardholder data.”
Read 2026-09-13 · official docs
- Security Practices - Zeabur ↗
“Zeabur is currently pursuing SOC 2 Type II certification. Our compliance program covers the Trust Services Criteria for security, availability, and confidentiality.”
Read 2026-09-27 · official docs
- Privacy Policy - Zeabur ↗
“If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR.”
Read 2026-09-27 · official docs
- Zeplo Privacy ↗
“Information that Zeplo collects may be stored and processed in and transferred between any of the countries in which Zeplo operates to enable the use of the information in accordance with this privacy policy. [...] You agree to such cross-border transfers of personal information.”
Read 2026-09-13 · official site
- Security - Zuplo Docs ↗
“compliance including our SOC2 Type II accreditation status.”
Read 2026-09-21 · official site