Permit.io · Compliance
Permit.io compliance
Read from Permit.io's own page on 2026-11-10. 4 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Trust center
Attestations
framework: SOC2type: Type II attestationscope: Permit.io serviceissuer: independent examinerreport access: on_request
Sections 1–2 are public; the full report is available on request.Read from Permit.io's own page on 2026-11-10
framework: HIPAAtype: compliance posture with BAAs availablescope: HIPAA-regulated workloadsreport access: unstated
Business Associate Agreements are available where applicable.Read from Permit.io's own page on 2026-11-10
framework: GDPRtype: compliance posturescope: data subject rights and international transfersreport access: unstated
Permit.io supports data subject rights, contractual processing terms, and Standard Contractual Clauses for applicable international transfers.Read from Permit.io's own page on 2026-11-10
framework: CCPAtype: compliance posturescope: applicable California consumer rightsreport access: unstated
Privacy procedures support applicable California consumer rights and customer data processing obligations.Read from Permit.io's own page on 2026-11-10
Document
Download YAML · schema: API Commons Compliance 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page