Feature
SOC 2
Independently audited SOC 2 controls.
38 providers
258 APIs
38 declared variants
The provider holds a SOC 2 Type I or II attestation covering security and related trust criteria. Usually the first artifact an enterprise security review asks for.
38 API providers on the APIs.io network offer soc 2. The highest-rated are Unified.to, Affinda, Vercel, Paragon, Merge.
Providers
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 4 Complete, well-documented, and agent-ready
Unified.to
Unified is a real-time unified API platform that provides access to over 360 integrations across 22 categor...
Affinda
Affinda is an Intelligent Document Processing (IDP) platform that uses AI to extract structured data from d...
Vercel
Vercel is a cloud platform that helps developers build, deploy, and scale modern web applications quickly a...
Paragon
Paragon is the Integration Infrastructure Platform for B2B SaaS and AI products. The platform combines Conn...
Strong 11 Solid coverage with minor gaps
Merge
Merge is the connective infrastructure for production AI. The Merge Unified API offers one API surface acro...
Bright Data
Bright Data is an Israeli web data platform and operator of the world's largest legitimate residential prox...
Highlight (highlight.io)
Highlight (highlight.io) is the open-source, full-stack monitoring platform — session replay, error monitor...
Modal
Modal is a serverless cloud platform for AI and data workloads. Modal lets developers write ordinary Python...
Tink
Tink, a Visa solution acquired in 2022, is a European Open Banking platform with 6,000+ bank connections ac...
sensible-so
Sensible is a document-automation API platform that extracts structured data from PDFs, images, spreadsheet...
Vital
Vital (now operating as Junction, formerly tryVital) is a health-data API platform that gives digital-healt...
socure
Socure is the leading vertically-integrated digital identity verification and fraud-prevention platform, us...
Choreo
WSO2 Choreo is an enterprise-grade Internal Developer Platform (IDP) and application orchestration platform...
WorkOS
WorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterp...
Regal
Regal is a New York City-based AI Agent Platform purpose-built for contact center operations. The Regal pla...
Developing 14 Usable, with meaningful gaps to close
Filevine
Filevine is the leading legal case management and operating intelligence platform for plaintiff, personal-i...
Neon
Neon is a serverless Postgres platform that provides fully managed, scalable PostgreSQL databases optimized...
Encore
Encore is a backend application framework and developer cloud that lets engineering teams build type-safe d...
Oxylabs
Oxylabs is a Lithuanian (Vilnius-based) web intelligence platform providing premium proxy networks (Residen...
Oura
Oura is a health-technology company that makes the Oura Ring — a titanium smart ring packed with PPG, body-...
UserGems
UserGems is a San Francisco-based sales intelligence platform that tracks champion job changes and surfaces...
Zluri
Zluri is a SaaS management and operations platform that helps organizations discover, govern, and optimize ...
Instabug (Luciq)
Instabug — now rebranded as Luciq — is an agentic mobile observability platform covering bug reporting, cra...
Supabase
Supabase is an open-source Firebase alternative that provides a suite of backend services built on top of P...
Blockdaemon
Blockdaemon is an institutional blockchain infrastructure company founded in 2017 by Konstantin Richter. It...
Tray.io
Tray.io (now also known as Tray.ai) is an AI-ready integration platform as a service (iPaaS) that enables b...
Acadia
Acadia is a Connected Worker Platform designed for employee productivity, acquired by Epicor. It delivers d...
Nango
Nango.dev is a developer infrastructure platform that simplifies building product integrations with externa...
Zoho
Zoho is a comprehensive cloud software suite offering 55+ integrated business applications for sales, marke...
Thin 5 Limited public surface area
DocuPanda
DocuPanda (now also branded DocuPipe, operated by Hoss Inc.) is an AI-powered document intelligence API tha...
CData
CData Software is a leading provider of data access and connectivity solutions. Our standards-based connect...
Lex Machina
Lex Machina is a legal analytics platform owned by LexisNexis that transforms raw court documents and docke...
Blynk
Blynk is a low-code / no-code IoT software platform that helps companies prototype, deploy, and remotely ma...
Redox
Redox is a healthcare interoperability platform that lets digital health vendors, providers, and payers sen...
Emerging 4 Early or largely undocumented
Fluidstack
Fluidstack is an AI cloud platform that builds and operates high-performance, single-tenant GPU clusters fo...
Certn
Certn is a Canadian background screening platform headquartered in Victoria, British Columbia, providing fa...
AgentOps
AgentOps is an observability, evaluation, and debugging platform for AI agents. Its open-source Python SDK ...
Scenario
Scenario is a Paris- and San Francisco-headquartered AI platform for game asset generation founded in 2021 ...
What Providers Actually Declared
This feature is a canonical term. These are the free-text strings
providers wrote in their own apis.yml that map onto it.
Enterprise SSO, SOC 2 Type II, governance, audit trail, custom integrationsEnterprise custom: unlimited, SOC 2, RBAC, SAML SSO, HIPAA optionEnterprise with custom limits, SAML SSO, SOC 2/HIPAAFCRA, SOC 2 Type II, and ISO 27001 compliance postureGDPR + HIPAA + SOC 2GDPR, SOC 2 Type 2, and ISO 27001 certifiedHIPAA on Enterprise; SOC 2 Type IIHIPAA, SOC 2 Type 2, ISO 27001, GDPR-readyHIPAA-aligned data handling and SOC 2 controlsHITRUST and SOC 2Policy Enforcement (PCI DSS, SOC 2 Type 2)SOC 2SOC 2 / HIPAASOC 2 Type 2SOC 2 Type 2 + GDPR + HIPAA-eligible deploymentSOC 2 Type 2 compliantSOC 2 Type 2, GDPR, HIPAA-eligibleSOC 2 Type 2, GDPR, and CCPA compliance postureSOC 2 Type 2, ISO 27001, GDPR, HIPAA-readySOC 2 Type 2, ISO 27001, HIPAA, GDPRSOC 2 Type II (June 2025) and ISO 27001 (July 2022) certifications; OFAC compliantSOC 2 Type II (with HIPAA), CJIS 5.9.3/5.9.4, ISO 27001, HIPAA, GDPR, CCPA/CPRA, PCI DSS via StripeSOC 2 Type II CertifiedSOC 2 Type II and PSD2 LicenceSOC 2 Type II certifiedSOC 2 Type II, HIPAA, and ISO 27001 attestations available on the hosted offeringSOC 2 Type II, ISO 27001, GDPR, and CCPA compliantSOC 2 Type II, ISO 27001, PCI-DSS, and US FedRAMP-aligned GovCloud environment (developer.socure.us)SOC 2 Type II, ISO 27001:2022, GDPR, and HIPAA (Enterprise) complianceSOC 2 Type II, ISO/IEC 27001, GDPR, and CCPA complianceSOC 2 Type II, SAML SSO, OAuth SSO, SCIM provisioning, RBAC, regional data pinningSOC 2 and ISO certifications via LexisNexis enterprise security programSOC 2 compliance assistance and custom RBAC on EnterpriseSOC 2 compliant managed cloud infrastructure (Blynk.Cloud)SOC 2, HIPAA, GDPR, CCPA, and DPA compliance with no customer data used for LLM trainingSOC2Scale: $0.222/CU-hour, up to 56 CU fixed, HIPAA/SOC 2Team at $599/mo with SOC 2, SSO, 14-day backups
Scroll for all 38