HyperComply

{
  "id": "hypercomply",
  "name": "HyperComply",
  "tier": "tier1",
  "adapter_status": "implemented",
  "connect_method": "public_rest_cms",
  "auth": "none (tenant host passed as ?domain=)",
  "normalized_coverage": {
    "organizations": true,
    "certifications": "inferred_from_names",
    "controls": "cms_modules",
    "subprocessors": false,
    "documents": true,
    "securityUpdates": false
  },
  "rate_limit": {
    "recommendedRps": 6,
    "maxConcurrency": 6,
    "readCeiling": "HARD LIMIT ~10-11 req/s (token bucket); 429 {\"error\":\"rate limit exceeded\"}, no Retry-After",
    "limiter": "token bucket ~10-11/s per IP — the binding constraint of the set",
    "penalty": "429 (no Retry-After)",
    "backoff": "self-driven exponential backoff on 429 (start ~1s); stay <=6rps"
  },
  "stats": {
    "providerId": "hypercomply",
    "name": "HyperComply",
    "adapterStatus": "implemented",
    "organizations": 13,
    "trustCenters": 13,
    "certifications": 40,
    "controls": 87,
    "subprocessors": 0,
    "documents": 292,
    "securityUpdates": 0,
    "sources": 13
  }
}

{
  "support_status": "supported",
  "sync_cadence": "daily_full_sync",
  "rate_limit": {
    "recommendedRps": 6,
    "maxConcurrency": 6,
    "readCeiling": "HARD LIMIT ~10-11 req/s (token bucket); 429 {\"error\":\"rate limit exceeded\"}, no Retry-After",
    "limiter": "token bucket ~10-11/s per IP — the binding constraint of the set",
    "penalty": "429 (no Retry-After)",
    "backoff": "self-driven exponential backoff on 429 (start ~1s); stay <=6rps"
  },
  "known_source_count": 18,
  "harvestable_source_count": 13,
  "seed": "seeds/hypercomply-backfill-2026-06-11.json"
}

{
  "companies": 13,
  "trust_centers": 13,
  "certifications": 40,
  "controls": 87,
  "subprocessors": 0,
  "documents": 292,
  "security_updates": 0,
  "sources": 13
}

{
  "score": 72,
  "score_kind": "bounded_0_to_100_observed_normalized_trust_center_coverage",
  "granularity_tier": "high_granularity",
  "observed_capabilities": {
    "trust_centers": true,
    "certifications": true,
    "controls": true,
    "subprocessors": false,
    "documents": true,
    "security_updates": false,
    "provenance": true
  },
  "available_capabilities": [
    "trust_centers",
    "certifications",
    "controls",
    "documents",
    "provenance"
  ],
  "missing_capabilities": [
    "subprocessors",
    "security_updates"
  ],
  "analysis_readiness": {
    "vendor_risk_profile": true,
    "security_questionnaire_evidence": true,
    "subprocessor_monitoring": false,
    "document_inventory": true,
    "compliance_tracking": true,
    "security_advisory_monitoring": false,
    "provenance_audit": true
  },
  "counts": {
    "trust_centers": 13,
    "certifications": 40,
    "controls": 87,
    "subprocessors": 0,
    "documents": 292,
    "security_updates": 0,
    "sources": 13
  }
}

{
  "access_profiles": [
    {
      "key": "hypercomply_public_rest_cms",
      "count": 13
    }
  ],
  "access_levels": [
    {
      "key": "mixed",
      "count": 13
    }
  ],
  "data_access": {
    "certifications": 11,
    "controls": 13,
    "subprocessors": 0,
    "documents": 12,
    "security_updates": 0
  }
}

{
  "rank": 9,
  "segment": "smb_midmarket",
  "owner": "HyperComply (independent; security questionnaire + trust platform)",
  "auth": "none",
  "connect": {
    "method": "public_rest",
    "fetch": "GET https://questionnaire-storage.hypercomply.com/public_trust_api/1/trust_page?domain={tenantDomain}",
    "key": "domain query param = the trust-center hostname (e.g. trust.observe.ai)",
    "cors": "open; single unauthenticated GET returns the whole trust center snapshot",
    "correction": "registry previously guessed 'GraphQL' — it is plain REST (the SPA uses Apollo but data comes from this REST endpoint)",
    "officialApi": null
  },
  "discovery": {
    "cnameTarget": "proxy.hypercomplytrust.com",
    "handleInCname": false,
    "note": "shared CNAME target (handle NOT in CNAME); the tenant hostname is the API key via ?domain=. assets.hypercomply.com / hypercomply-public-files-prod.s3 / 'Powered by HyperComply' svg confirm",
    "fingerprints": [
      "CNAME proxy.hypercomplytrust.com",
      "questionnaire-storage.hypercomply.com/public_trust_api",
      "assets.hypercomply.com",
      "PoweredByHyperComply svg"
    ],
    "channels": [
      "dns_cname_sweep",
      "crt.sh",
      "builtwith:HyperComply"
    ]
  },
  "backfill_2026_06_11": {
    "priorKnown": 11,
    "harvestableNow": 13,
    "netNew": 7,
    "netNewFromCommonCrawl": 4,
    "totalKnown": 18,
    "seed": "seeds/hypercomply-backfill-2026-06-11.json"
  }
}

{
  "self": "/v1/coverage/providers/hypercomply",
  "provider": "/v1/providers/hypercomply",
  "companies": "/v1/companies?provider=hypercomply",
  "trust_centers": "/v1/trust-centers?provider=hypercomply",
  "sources": "/v1/sources?provider=hypercomply"
}