Metabase · Compliance
Metabase compliance
Read from Metabase's own page on 2026-11-10. 4 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Trust center
Attestations
framework: SOC2type: SOC 2 Type II reportscope: controls governing the security of customer dataissuer: Sensiba LLPreport access: unstated
Our SOC 2 Type II report attests to the controls Metabase has in place governing the security of customer data.Read from Metabase's own page on 2026-11-10
framework: SOC1type: SOC 1 Type II reportscope: internal control over financial reportingreport access: unstated
Our SOC 1 Type II report provides assurances that Metabase has internal control over financial reporting.Read from Metabase's own page on 2026-11-10
framework: GDPRtype: GDPR compliancescope: products, processes, and proceduresreport access: unstated
At Metabase, we’ve worked to make our products, processes, and procedures GDPR-compliant.Read from Metabase's own page on 2026-11-10
framework: CCPAtype: service provider under CCPAscope: customer datareport access: unstated
Metabase acts as a service provider to customers under the California Consumer Privacy Act (CCPA), and we support our customers’ compliance with the CCPA.Read from Metabase's own page on 2026-11-10
Document
Download YAML · schema: API Commons Compliance 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page