| 2025 SOC 2 Type 2 Report | AvidXchange | SafeBase | documented | - | - |
| 2025-07-11: Low Vulnerability Disclosure | Ashby | SafeBase | documented | - | - |
| 2026 Apollo Tax Residency Certificate | Apollo.io | SafeBase | documented | - | - |
| 2026_EH Report - Expenses | Mendel | SafeBase | documented | - | - |
| 2026_EH Report - Travel | Mendel | SafeBase | documented | - | - |
| 21 CFR Part 11 Compliance | Eupry | SafeBase | documented | - | - |
| 24/7/365 Security Operations Center | Axis Communications | SafeBase | documented | - | - |
| 25.5 IP Rights Protection | casepal | Vanta Trust Center | documented | - | - |
| 28 + 33 - Remote access MFA enforced | Snappy | Vanta Trust Center | documented | - | - |
| 2FA | Dataloop AI | SafeBase | documented | - | - |
| 3 - PCI DSS SAQ-D | Gong | SafeBase | documented | - | - |
| 3. Assessing Data Transfers | Everbridge | SafeBase | documented | - | - |
| 3.1 Processes and mechanisms for protecting stored account data are defined and understood. | Staq.io | Vanta Trust Center | documented | - | - |
| 3.1.0 Risk management program established | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 3.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 3.1.1 | Archon Systems | Vanta Trust Center | documented | - | - |
| 3.1.1 Risks assessments performed | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 3.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 3.2 Storage of account data is kept to a minimum. | Staq.io | Vanta Trust Center | documented | - | - |
| 3.2.1 | Archon Systems | Vanta Trust Center | documented | - | - |
| 3.3 Sensitive authentication data (SAD) is not stored after authorization. | Staq.io | Vanta Trust Center | documented | - | - |
| 3.3.2 | Xactus | Vanta Trust Center | documented | - | - |
| 3.3.3 | Xactus | Vanta Trust Center | documented | - | - |
| 3.4 Access to displays of full PAN and ability to copy PAN is restricted. | Staq.io | Vanta Trust Center | documented | - | - |
| 3.4.1 | Xactus | Vanta Trust Center | documented | - | - |
| 3.4.2 | Xactus | Vanta Trust Center | documented | - | - |
| 3.4.2 Change management procedures enforced | Broker Buddha Technologies Inc. | Vanta Trust Center | documented | - | - |
| 3.5.1 | Xactus | Vanta Trust Center | documented | - | - |
| 3.5.1.1 | Xactus | Vanta Trust Center | documented | - | - |
| 3.5.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 3.5.1.3 | Xactus | Vanta Trust Center | documented | - | - |
| 3.6 Cryptographic keys used to protect stored account data are secured. | Staq.io | Vanta Trust Center | documented | - | - |
| 3.6.1 | Xactus | Vanta Trust Center | documented | - | - |
| 3.6.1.2 | Xactus | Vanta Trust Center | documented | - | - |
| 3.6.1.3 | Xactus | Vanta Trust Center | documented | - | - |
| 3.6.1.4 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7 Where cryptography is used to protect stored account data, key management processes and procedures covering all aspects of the key lifecycle are defined and implemented. | Staq.io | Vanta Trust Center | documented | - | - |
| 3.7.1 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.2 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.3 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.4 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.5 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.6 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.7 | Xactus | Vanta Trust Center | documented | - | - |
| 3.7.8 | Xactus | Vanta Trust Center | documented | - | - |
| 37 - Data encryption utilized | Snappy | Vanta Trust Center | documented | - | - |
| 38 - Access revoked upon termination | Snappy | Vanta Trust Center | documented | - | - |
| 3DS Crypto Device Config Standard | Outseer | SafeBase | documented | - | - |
| 3rd party authentication | Cribl | TrustShare (TrustCloud / Kintent) | documented | - | - |
| 3rd party authentication | Cribl | TrustShare (TrustCloud / Kintent) | documented | - | - |