# Compliance claims for 171 products, each with a source

> Security certifications and privacy claims checked across 597 vendor websites. 171 listings now show SOC 2, ISO 27001, HIPAA, GDPR and more, each linked to the page that states it.

Date: 2026-11-14
Source: https://signagelist.org/updates/2026-11-14/

## Changed products

- [42 Digital Signage](https://signagelist.org/products/42-digital-signage/): Compliance now lists GDPR, linked to the vendor page that states it.
- [AD+Sign](https://signagelist.org/products/ad-sign/): Compliance now lists GDPR, linked to the vendor page that states it.
- [AdCast](https://signagelist.org/products/adcast/): Compliance now lists GDPR, linked to the vendor page that states it.
- [AdMobilize](https://signagelist.org/products/admobilize/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Experience Manager Screens](https://signagelist.org/products/aem-screens/): Compliance now lists GDPR, linked to the vendor page that states it.
- [agentView](https://signagelist.org/products/agentview/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Airtame](https://signagelist.org/products/airtame/): Compliance now lists CSA STAR, linked to the vendor page that states it.
- [AIScreen](https://signagelist.org/products/aiscreen/): Compliance now lists SOC 2, linked to the vendor page that states it.
- [Appspace](https://signagelist.org/products/appspace/): Compliance now lists SOC 3 Type II, ISO 27001, ISO 27017 and GDPR, each linked to the vendor page that states it.
- [Aquaji](https://signagelist.org/products/aquaji/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Bizplay](https://signagelist.org/products/bizplay/): Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
- [Bohemica Signage](https://signagelist.org/products/bohemica-signage/): Compliance now lists GDPR, linked to the vendor page that states it.
- [BrandVisionHD](https://signagelist.org/products/brandvisionhd/): Compliance now lists SOC 2, linked to the vendor page that states it.
- [Brix](https://signagelist.org/products/brix/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Broadsign](https://signagelist.org/products/broadsign/): Compliance now lists SOC 2 Type II, GDPR and CCPA, each linked to the vendor page that states it.
- [Carousel](https://signagelist.org/products/carousel/): Compliance now lists SOC 2 Type II, GDPR, VPAT and WCAG, each linked to the vendor page that states it.
- [Castit](https://signagelist.org/products/castit/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Centoview](https://signagelist.org/products/centoview/): Compliance now lists ISO 27001 and ISO 9001, each linked to the vendor page that states it.
- [Creative Realities Clarity](https://signagelist.org/products/clarity/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [CleverLive](https://signagelist.org/products/cleverlive/): Compliance now lists GDPR, linked to the vendor page that states it.
- [cleverQ Picturemachine](https://signagelist.org/products/cleverq-picturemachine/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [CloudyFy TV](https://signagelist.org/products/cloudyfy-tv/): Compliance now lists SOC 2 Type II, ISO 27001, ISO 9001 and GDPR, each linked to the vendor page that states it. Certificates are held by the operating company Silicon IT Hub.
- [COATRO](https://signagelist.org/products/coatro/): Compliance now lists GDPR and PCI DSS, each linked to the vendor page that states it. Certificates are held by the parent company meldCX.
- [Comeen](https://signagelist.org/products/comeen/): Compliance now lists CSA STAR, linked to the vendor page that states it.
- [connectSignage](https://signagelist.org/products/connectsignage/): Compliance now lists GDPR, linked to the vendor page that states it.
- [FaceMe](https://signagelist.org/products/cyberlink-faceme/): Compliance now lists ISO 27001, ISO 27701 and GDPR, each linked to the vendor page that states it.
- [Digisigns](https://signagelist.org/products/digisigns/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [DigitalSigns.ai](https://signagelist.org/products/digitalsigns-ai/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Dise](https://signagelist.org/products/dise/): Compliance now lists SOC 2 Type II, SOC 3, ISO 27001, ISO 9001, ISO 14001, GDPR and CCPA, each linked to the vendor page that states it.
- [Displ](https://signagelist.org/products/displ/): Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
- [Displai](https://signagelist.org/products/displai/): Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
- [Display NOW](https://signagelist.org/products/display-now/): Compliance now lists SOC 2 Type II and GDPR, each linked to the vendor page that states it.
- [Displio](https://signagelist.org/products/displio/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Donatello Suite](https://signagelist.org/products/donatello-suite/): Compliance now lists SOC 2, ISO 27001, ISO 9001, HIPAA and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Wavetec.
- [Doohly](https://signagelist.org/products/doohly/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [DS Templates](https://signagelist.org/products/ds-templates/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Easy Signage](https://signagelist.org/products/easy-signage/): Compliance now lists SOC 2 Type I, ISO 27001, HIPAA with a BAA on offer and GDPR, each linked to the vendor page that states it.
- [easyCMS](https://signagelist.org/products/easycms/): Compliance now lists GDPR, linked to the vendor page that states it.
- [embed signage](https://signagelist.org/products/embed-signage/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [Emity](https://signagelist.org/products/emity/): Compliance now lists GDPR, linked to the vendor page that states it.
- [EngageSuite](https://signagelist.org/products/engagesuite/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Envoy Screens](https://signagelist.org/products/envoy-screens/): Compliance now lists SOC 2 Type II, HIPAA with a BAA on offer, GDPR and CCPA, each linked to the vendor page that states it.
- [Eye-In Media](https://signagelist.org/products/eye-in-media/): Compliance now lists HIPAA, linked to the vendor page that states it.
- [Eye-Intelligence](https://signagelist.org/products/eye-intelligence/): Compliance now lists HIPAA, linked to the vendor page that states it.
- [EZ-AD TV](https://signagelist.org/products/ez-ad-tv/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
- [Fingermark Supernova](https://signagelist.org/products/fingermark-supernova/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
- [firmCHANNEL](https://signagelist.org/products/firmchannel/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it. Certificates are held by the parent company Corum Digital.
- [Flame](https://signagelist.org/products/flame/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [FootfallCam](https://signagelist.org/products/footfallcam/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Framebaker](https://signagelist.org/products/framebaker/): Compliance now lists GDPR, linked to the vendor page that states it.
- [FRAMR.](https://signagelist.org/products/framr/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Fugo](https://signagelist.org/products/fugo/): Compliance now lists SOC 2 Type II, HIPAA and GDPR, each linked to the vendor page that states it.
- [Fusion Signage](https://signagelist.org/products/fusion-signage/): Existing SOC 2 and ISO 27001 entries now show the report type and link to the vendor page that states them.
- [GoBright](https://signagelist.org/products/gobright/): Compliance now lists ISO 27001, ISO 9001, ISO 14001 and GDPR, each linked to the vendor page that states it.
- [Gorilla Video Analytics](https://signagelist.org/products/gorilla-video-analytics/): Compliance now lists ISO 27001, ISO 27701 and GDPR, each linked to the vendor page that states it.
- [Grassfish IXM Platform](https://signagelist.org/products/grassfish-ixm-platform/): Compliance now lists SOC 2 Type II, SOC 3, ISO 27001, ISO 9001, ISO 14001, GDPR and CCPA, each linked to the vendor page that states it. Certificates are held by the parent company Vertiseit.
- [GRUBBRR](https://signagelist.org/products/grubbrr/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
- [hexnode](https://signagelist.org/products/hexnode/): Compliance now lists SOC 2 Type II, ISO 27001, GDPR and PCI DSS, each linked to the vendor page that states it.
- [iCompel](https://signagelist.org/products/icompel/): Compliance now lists SOC 2 Type II, ISO 27001, ISO 9001, ISO 14001 and Cyber Essentials, with CMMC in progress, each linked to the vendor page that states it. Certificates are held by the parent company Black Box.
- [Infinite Digital CMS](https://signagelist.org/products/infinite-digital-cms/): Compliance now lists GDPR, linked to the vendor page that states it.
- [ANIMA INFINITYS](https://signagelist.org/products/infinitys-anima/): Compliance now lists ISO 27001, ISO 9001 and GDPR, each linked to the vendor page that states it.
- [InfoBox Digital Signage](https://signagelist.org/products/infobox/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Intuiface](https://signagelist.org/products/intuiface/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [ITESlive](https://signagelist.org/products/itesmedia/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [Joan](https://signagelist.org/products/joan/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [Kitcast](https://signagelist.org/products/kitcast/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Korbyt](https://signagelist.org/products/korbyt/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
- [L Squared Hub](https://signagelist.org/products/l-squared/): Compliance now lists SOC 2 Type II and ISO 27001, each linked to the vendor page that states it.
- [LeftClick](https://signagelist.org/products/leftclick/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [Liqvid](https://signagelist.org/products/liqvid/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Look DS](https://signagelist.org/products/look-ds/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Lookr](https://signagelist.org/products/lookr/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [Lumicast](https://signagelist.org/products/lumicast/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Luna Screens](https://signagelist.org/products/luna-screens/): Compliance now lists GDPR, linked to the vendor page that states it.
- [MagicINFO](https://signagelist.org/products/magicinfo/): Compliance now lists ISO 27701, linked to the vendor page that states it.
- [Mandoe](https://signagelist.org/products/mandoe/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Mango Display](https://signagelist.org/products/mango-display/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [Marve DS](https://signagelist.org/products/marve-ds/): Compliance now lists ISO 9001, linked to the vendor page that states it.
- [MCOMS](https://signagelist.org/products/mcoms/): Compliance now lists ISO 9001, linked to the vendor page that states it.
- [MediaFusion](https://signagelist.org/products/mediafusion/): Compliance now lists ISO 9001 and ISO 14001, each linked to the vendor page that states it.
- [MediaTile](https://signagelist.org/products/mediatile/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it. Certificates are held by the parent company Corum Digital.
- [Medyapin](https://signagelist.org/products/medyapin/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Monitors AnyWhere](https://signagelist.org/products/monitorsanywhere/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Mvix](https://signagelist.org/products/mvix/): Compliance now lists SOC 2 and ISO 27001, each linked to the vendor page that states it.
- [MyVideoSpot](https://signagelist.org/products/myvideospot/): Compliance now lists VPAT, linked to the vendor page that states it.
- [Navigo](https://signagelist.org/products/navigo/): Compliance now lists Section 508, linked to the vendor page that states it.
- [Navori](https://signagelist.org/products/navori/): Compliance now lists SOC 2 Type I & II, linked to the vendor page that states it.
- [Neon](https://signagelist.org/products/neon/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Netpresenter](https://signagelist.org/products/netpresenter/): Compliance now lists ISO 27001, HIPAA, GDPR and Cyber Essentials, each linked to the vendor page that states it.
- [Nimbus808](https://signagelist.org/products/nimbus808/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Nonius](https://signagelist.org/products/nonius/): Compliance now lists GDPR, linked to the vendor page that states it.
- [NoviSign](https://signagelist.org/products/novisign/): Compliance now lists SOC 2 Type II and GDPR, each linked to the vendor page that states it.
- [NowSignage](https://signagelist.org/products/nowsignage/): Compliance now lists ISO 27001 and ISO 9001, with SOC 2 in progress, each linked to the vendor page that states it.
- [Nsigntv](https://signagelist.org/products/nsigntv/): Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
- [Nutrislice](https://signagelist.org/products/nutrislice/): Compliance now lists VPAT, linked to the vendor page that states it.
- [OmmaSign](https://signagelist.org/products/ommasign/): Compliance now lists ISO 27001, with SOC 2 in progress, each linked to the vendor page that states it.
- [Omnivex](https://signagelist.org/products/omnivex/): Compliance now lists SOC 2, linked to the vendor page that states it.
- [onQ CMS](https://signagelist.org/products/onq-cms/): Compliance now lists ISO 27001, GDPR and CCPA, each linked to the vendor page that states it.
- [OnSign TV](https://signagelist.org/products/onsign-tv/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [OpenSign](https://signagelist.org/products/opensign/): Compliance now notes SOC 2 and ISO 27001 in progress, linked to the vendor page that says so.
- [OptiSigns](https://signagelist.org/products/optisigns/): Compliance now lists SOC 2 Type II, GDPR and VPAT, each linked to the vendor page that states it.
- [Oscart](https://signagelist.org/products/oscart/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Pickcel](https://signagelist.org/products/pickcel/): Compliance now lists SOC 2 Type II, ISO 27001 and GDPR, each linked to the vendor page that states it.
- [PLAYipp](https://signagelist.org/products/playipp/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Poppulo](https://signagelist.org/products/poppulo/): Compliance now lists SOC 2 Type II, ISO 27001 and GDPR, each linked to the vendor page that states it.
- [Posterbooking](https://signagelist.org/products/posterbooking/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Q-play](https://signagelist.org/products/q-play/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [Qmatic Display](https://signagelist.org/products/qmatic-display/): Compliance now lists ISO 27001, ISO 9001, GDPR and CCPA, each linked to the vendor page that states it.
- [Quividi](https://signagelist.org/products/quividi/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Radix](https://signagelist.org/products/radix/): Compliance now lists SOC 2 Type II, SOC 3, ISO 27001, GDPR, CCPA and PCI DSS, each linked to the vendor page that states it.
- [Creative Realities Reflect AdLogic](https://signagelist.org/products/reflect-adlogic/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [Creative Realities Reflect eXperience](https://signagelist.org/products/reflect-experience/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [Creative Realities ReflectView](https://signagelist.org/products/reflectview/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [Repeat Signage](https://signagelist.org/products/repeat-signage/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Revel Digital](https://signagelist.org/products/revel-digital/): Compliance now lists ISO 27001, GDPR and CCPA, each linked to the vendor page that states it.
- [Rise Vision](https://signagelist.org/products/rise-vision/): Compliance now lists SOC 2 Type II and VPAT, each linked to the vendor page that states it.
- [SageVIEW](https://signagelist.org/products/sageview/): Compliance now lists PCI DSS, linked to the vendor page that states it.
- [Scalefusion](https://signagelist.org/products/scalefusion/): Compliance now lists SOC 2 Type II, ISO 27001, HIPAA and GDPR, each linked to the vendor page that states it.
- [Screen Pulse](https://signagelist.org/products/screen-pulse/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Screen-Signs](https://signagelist.org/products/screen-signs/): Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
- [ScreenaAI](https://signagelist.org/products/screenaai/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Screenbird](https://signagelist.org/products/screenbird/): Compliance now lists GDPR, linked to the vendor page that states it.
- [ScreenCloud](https://signagelist.org/products/screencloud/): Compliance now lists SOC 2 Type II, GDPR, CCPA and Cyber Essentials, each linked to the vendor page that states it.
- [Screenfluence](https://signagelist.org/products/screenfluence/): Compliance now lists SOC 2, linked to the vendor page that states it.
- [Screenly](https://signagelist.org/products/screenly/): Compliance now lists SOC 2 Type II and ISO 27001, each linked to the vendor page that states it.
- [ScreenManager](https://signagelist.org/products/screenmanager/): Compliance now lists GDPR, linked to the vendor page that states it.
- [SCRIX](https://signagelist.org/products/scrix/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Signa](https://signagelist.org/products/signa/): Compliance now lists SOC 2 Type II, GDPR and CCPA, with ISO 27001 in progress, each linked to the vendor page that states it.
- [Signagelive](https://signagelist.org/products/signagelive/): Compliance now lists SOC 2 Type I & II, ISO 27001 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Navori.
- [SignageNow Digital Signage Software](https://signagelist.org/products/signagenow/): Compliance now lists GDPR, linked to the vendor page that states it.
- [signageOS](https://signagelist.org/products/signageos/): Compliance now lists SOC 2 Type II and ISO 27001, each linked to the vendor page that states it.
- [SignageStack](https://signagelist.org/products/signagestack/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Signao](https://signagelist.org/products/signao/): Compliance now lists GDPR, linked to the vendor page that states it.
- [SignIPS](https://signagelist.org/products/signips/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Signital](https://signagelist.org/products/signital/): Compliance now lists GDPR, linked to the vendor page that states it.
- [SignStix](https://signagelist.org/products/signstix/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [Skykit Beam](https://signagelist.org/products/skykit/): Compliance now lists SOC 2 Type II, HIPAA with a BAA on offer, GDPR and CCPA, each linked to the vendor page that states it.
- [Slideshow](https://signagelist.org/products/slideshow/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Smart Prospective](https://signagelist.org/products/smart-prospective/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Smart-Signage](https://signagelist.org/products/smart-signage/): Compliance now lists GDPR, linked to the vendor page that states it.
- [SmartPlayer](https://signagelist.org/products/smartplayer/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Smartsign](https://signagelist.org/products/smartsign/): Compliance now lists GDPR, linked to the vendor page that states it.
- [SmartSign2Go](https://signagelist.org/products/smartsign2go/): Compliance now lists GDPR, linked to the vendor page that states it.
- [SnapComms](https://signagelist.org/products/snapcomms/): Compliance now lists SOC 2, SOC 3 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Everbridge.
- [Socialwalls](https://signagelist.org/products/socialwalls/): Compliance now lists GDPR, with WCAG in progress, each linked to the vendor page that states it.
- [Spectrio](https://signagelist.org/products/spectrio/): Compliance now lists SOC 2 Type II, linked to the vendor page that states it.
- [SureVideo](https://signagelist.org/products/surevideo/): Compliance now lists SOC 2 Type II, ISO 27001, HIPAA, GDPR, Cyber Essentials and Cyber Essentials Plus, each linked to the vendor page that states it.
- [Telefónica Tech](https://signagelist.org/products/telefonica-tech/): Compliance now lists SOC 2 Type II, SOC 1 Type II, ISO 27001, ISO 9001, ISO 14001, TISAX and ENS, each linked to the vendor page that states it.
- [TelemetryTV](https://signagelist.org/products/telemetrytv/): Compliance now lists SOC 2, GDPR and PCI DSS, each linked to the vendor page that states it.
- [Tigermeeting](https://signagelist.org/products/tigermeeting/): Compliance now lists GDPR and CRA, each linked to the vendor page that states it.
- [TrilbyTV](https://signagelist.org/products/trilbytv/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Trillboards](https://signagelist.org/products/trillboards/): Compliance now lists GDPR and CCPA, each linked to the vendor page that states it.
- [Trinax](https://signagelist.org/products/trinax/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [TVpilot.App](https://signagelist.org/products/tvpilot-app/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Userful Engage](https://signagelist.org/products/userful-engage/): Compliance now lists SOC 2 and GDPR, each linked to the vendor page that states it.
- [Valotalive](https://signagelist.org/products/valotalive/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Vibe.fyi](https://signagelist.org/products/vibe-fyi/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [Videri](https://signagelist.org/products/videri/): Compliance now lists SOC 2 Type I, linked to the vendor page that states it.
- [viewneo](https://signagelist.org/products/viewneo/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Adversign Media.
- [VIGITSIGN](https://signagelist.org/products/vigitsign/): Compliance now lists ISO 9001, linked to the vendor page that states it.
- [VirtuSignage](https://signagelist.org/products/virtusignage/): Compliance now lists ISO 27001 and ISO 9001, each linked to the vendor page that states it.
- [Visual Art Signage Player](https://signagelist.org/products/visual-art-signage-player/): Compliance now lists SOC 2 Type II, ISO 27001, ISO 9001, ISO 14001 and GDPR, each linked to the vendor page that states it. Certificates are held by the parent company Vertiseit.
- [Voome](https://signagelist.org/products/voome/): Compliance now lists ISO 27001 and GDPR, each linked to the vendor page that states it.
- [Wallboard](https://signagelist.org/products/wallboard/): Compliance now lists SOC 2 Type II, GDPR and CCPA, each linked to the vendor page that states it.
- [Wauly](https://signagelist.org/products/wauly/): Compliance now lists ISO 27001, linked to the vendor page that states it.
- [World VDS](https://signagelist.org/products/worldvds/): Compliance now lists SOC 2 and ISO 27001, each linked to the vendor page that states it.
- [Xibo](https://signagelist.org/products/xibo/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Yodeck](https://signagelist.org/products/yodeck/): Compliance now lists ISO 27001, ISO 9001 and GDPR, each linked to the vendor page that states it.
- [Zebrix](https://signagelist.org/products/zebrix/): Compliance now lists GDPR, linked to the vendor page that states it.
- [Zeetaminds](https://signagelist.org/products/zeetaminds/): Compliance now lists SOC 2 Type II and GDPR, each linked to the vendor page that states it.
- [Zignage zCast](https://signagelist.org/products/zignage-zcast/): Compliance now lists GDPR, linked to the vendor page that states it.

Compliance, with sources The compliance section of a listing used to be five yes/no flags, and almost every listing had all five set to no. That said less about the vendors than about how hard the information is to find: certifications sit in website footers, trust centres, security pages and HIPAA pages that the homepage never links to.
Every active vendor website was checked for security certifications and privacy claims, 597 of 625 in all. 171 listings now carry at least one claim, drawn from 27 standards including SOC 1, 2 and 3, the ISO 27000 family, ISO 9001 and 14001, HIPAA, GDPR, CCPA, PCI DSS, Cyber Essentials, TISAX, CSA STAR, ENS, CRA, VPAT and WCAG.
Each claim records what kind of claim it is, because the standards work differently:
Certified: an audited certificate or report is held, such as a SOC 2 report, an ISO certificate or Cyber Essentials. Compliant: the vendor declares compliance with a law or framework that has no certificate of its own. GDPR and HIPAA work this way. There is no HIPAA certificate, so a vendor offering a Business Associate Agreement is the strongest signal available. In progress: the vendor says an audit is under way. Every badge on a product page now links to the vendor page that states the claim. Hovering it shows the detail (the SOC 2 report type, a BAA on offer, a certificate held by a parent company) and the month it was checked.
What was left out Only claims a vendor makes about itself count. Certificates held by a hosting provider (“hosted on AWS, which is ISO 27001 certified”) belong to the host and are not listed. Neither are passing mentions: a privacy policy that lists GDPR rights without claiming compliance, or marketing copy calling a product “HIPAA-ready”. Where a certificate belongs to a parent company, the listing says so.
Claims change over time, so treat each badge as a dated pointer to the vendor’s own page.