Compliance claims for 171 products, each with a source
Security certifications and privacy claims checked across 597 vendor websites. 171 listings now show SOC 2, ISO 27001, HIPAA, GDPR and more, each linked to the page that states it.
Compliance, with sources
The compliance section of a listing used to be five yes/no flags, and almost every listing had all five set to no. That said less about the vendors than about how hard the information is to find: certifications sit in website footers, trust centres, security pages and HIPAA pages that the homepage never links to.
Every active vendor website was checked for security certifications and privacy claims, 597 of 625 in all. 171 listings now carry at least one claim, drawn from 27 standards including SOC 1, 2 and 3, the ISO 27000 family, ISO 9001 and 14001, HIPAA, GDPR, CCPA, PCI DSS, Cyber Essentials, TISAX, CSA STAR, ENS, CRA, VPAT and WCAG.
Each claim records what kind of claim it is, because the standards work differently:
- Certified: an audited certificate or report is held, such as a SOC 2 report, an ISO certificate or Cyber Essentials.
- Compliant: the vendor declares compliance with a law or framework that has no certificate of its own. GDPR and HIPAA work this way. There is no HIPAA certificate, so a vendor offering a Business Associate Agreement is the strongest signal available.
- In progress: the vendor says an audit is under way.
Every badge on a product page now links to the vendor page that states the claim. Hovering it shows the detail (the SOC 2 report type, a BAA on offer, a certificate held by a parent company) and the month it was checked.
What was left out
Only claims a vendor makes about itself count. Certificates held by a hosting provider (“hosted on AWS, which is ISO 27001 certified”) belong to the host and are not listed. Neither are passing mentions: a privacy policy that lists GDPR rights without claiming compliance, or marketing copy calling a product “HIPAA-ready”. Where a certificate belongs to a parent company, the listing says so.
Claims change over time, so treat each badge as a dated pointer to the vendor’s own page.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists CSA STAR, linked to the vendor page that states it.
Compliance now lists SOC 2, linked to the vendor page that states it.
Compliance now lists SOC 3 Type II, ISO 27001, ISO 27017 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, GDPR, VPAT and WCAG, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001 and ISO 9001, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001, ISO 9001 and GDPR, each linked to the vendor page that states it. Certificates are held by the operating company Silicon IT Hub.
Compliance now lists GDPR and PCI DSS, each linked to the vendor page that states it. Certificates are held by the parent company meldCX.
Compliance now lists CSA STAR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, ISO 27701 and GDPR, each linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, SOC 3, ISO 27001, ISO 9001, ISO 14001, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2, ISO 27001, ISO 9001, HIPAA and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Wavetec.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, ISO 27001, HIPAA with a BAA on offer and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, HIPAA with a BAA on offer, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists HIPAA, linked to the vendor page that states it.
Compliance now lists HIPAA, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it. Certificates are held by the parent company Corum Digital.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, HIPAA and GDPR, each linked to the vendor page that states it.
Existing SOC 2 and ISO 27001 entries now show the report type and link to the vendor page that states them.
Compliance now lists ISO 27001, ISO 9001, ISO 14001 and GDPR, each linked to the vendor page that states it.
Compliance now lists ISO 27001, ISO 27701 and GDPR, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, SOC 3, ISO 27001, ISO 9001, ISO 14001, GDPR and CCPA, each linked to the vendor page that states it. Certificates are held by the parent company Vertiseit.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001, GDPR and PCI DSS, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001, ISO 9001, ISO 14001 and Cyber Essentials, with CMMC in progress, each linked to the vendor page that states it. Certificates are held by the parent company Black Box.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, ISO 9001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and ISO 27001, each linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27701, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists ISO 9001, linked to the vendor page that states it.
Compliance now lists ISO 9001, linked to the vendor page that states it.
Compliance now lists ISO 9001 and ISO 14001, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it. Certificates are held by the parent company Corum Digital.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 and ISO 27001, each linked to the vendor page that states it.
Compliance now lists VPAT, linked to the vendor page that states it.
Compliance now lists Section 508, linked to the vendor page that states it.
Compliance now lists SOC 2 Type I & II, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, HIPAA, GDPR and Cyber Essentials, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and GDPR, each linked to the vendor page that states it.
Compliance now lists ISO 27001 and ISO 9001, with SOC 2 in progress, each linked to the vendor page that states it.
Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists VPAT, linked to the vendor page that states it.
Compliance now lists ISO 27001, with SOC 2 in progress, each linked to the vendor page that states it.
Compliance now lists SOC 2, linked to the vendor page that states it.
Compliance now lists ISO 27001, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now notes SOC 2 and ISO 27001 in progress, linked to the vendor page that says so.
Compliance now lists SOC 2 Type II, GDPR and VPAT, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists ISO 27001, ISO 9001, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, SOC 3, ISO 27001, GDPR, CCPA and PCI DSS, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and VPAT, each linked to the vendor page that states it.
Compliance now lists PCI DSS, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001, HIPAA and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, GDPR, CCPA and Cyber Essentials, each linked to the vendor page that states it.
Compliance now lists SOC 2, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and ISO 27001, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, GDPR and CCPA, with ISO 27001 in progress, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type I & II, ISO 27001 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Navori.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and ISO 27001, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, HIPAA with a BAA on offer, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2, SOC 3 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Everbridge.
Compliance now lists GDPR, with WCAG in progress, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001, HIPAA, GDPR, Cyber Essentials and Cyber Essentials Plus, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, SOC 1 Type II, ISO 27001, ISO 9001, ISO 14001, TISAX and ENS, each linked to the vendor page that states it.
Compliance now lists SOC 2, GDPR and PCI DSS, each linked to the vendor page that states it.
Compliance now lists GDPR and CRA, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Adversign Media.
Compliance now lists ISO 9001, linked to the vendor page that states it.
Compliance now lists ISO 27001 and ISO 9001, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, ISO 27001, ISO 9001, ISO 14001 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Vertiseit.
Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
Compliance now lists SOC 2 Type II, GDPR and CCPA, each linked to the vendor page that states it.
Compliance now lists ISO 27001, linked to the vendor page that states it.
Compliance now lists SOC 2 and ISO 27001, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists ISO 27001, ISO 9001 and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
Compliance now lists SOC 2 Type II and GDPR, each linked to the vendor page that states it.
Compliance now lists GDPR, linked to the vendor page that states it.
171 products changed