Feature
SOC 2
Independently audited SOC 2 controls.
37 providers
417 APIs
37 declared variants
The provider holds a SOC 2 Type I or II attestation covering security and related trust criteria. Usually the first artifact an enterprise security review asks for.
37 API providers on the APIs.io network offer soc 2. The highest-rated are Regal, Vital, UserGems, Highlight (highlight.io), Tink.
Providers
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 4 Complete, well-documented, and agent-ready
RegalRegal is a New York City-based AI Agent Platform purpose-built for contact center operations. The Regal pla...VitalVital (now operating as Junction, formerly tryVital) is a health-data API platform that gives digital-healt...UserGemsUserGems is a San Francisco-based sales intelligence platform that tracks champion job changes and surfaces...Highlight (highlight.io)Highlight (highlight.io) is the open-source, full-stack monitoring platform — session replay, error monitor...
Strong 13 Solid coverage with minor gaps
TinkTink, a Visa solution acquired in 2022, is a European Open Banking platform with 6,000+ bank connections ac...ModalModal is a serverless cloud platform for AI and data workloads. Modal lets developers write ordinary Python...AffindaAffinda is an Intelligent Document Processing (IDP) platform that uses AI to extract structured data from d...socureSocure is the leading vertically-integrated digital identity verification and fraud-prevention platform, us...SensibleSensible is a document-automation API platform that extracts structured data from PDFs, images, spreadsheet...RedoxRedox is a healthcare data interoperability platform, founded in 2014 and headquartered in Madison, Wiscons...Unified.toUnified is a real-time unified API platform that provides access to over 360 integrations across 22 categor...MergeMerge is the connective infrastructure for production AI. The Merge Unified API offers one API surface acro...FilevineFilevine is the leading legal case management and operating intelligence platform for plaintiff, personal-i...OuraOura is a health-technology company that makes the Oura Ring — a titanium smart ring packed with PPG, body-...VercelVercel is a cloud platform that helps developers build, deploy, and scale modern web applications quickly a...ParagonParagon is the Integration Infrastructure Platform for B2B SaaS and AI products. The platform combines Conn...EncoreEncore is a backend application framework and developer cloud that lets engineering teams build type-safe d...
Developing 11 Usable, with meaningful gaps to close
OxylabsOxylabs is a Lithuanian (Vilnius-based) web intelligence platform providing premium proxy networks (Residen...Bright DataBright Data is an Israeli web data platform and operator of the world's largest legitimate residential prox...ZohoZoho is a comprehensive cloud software suite offering 55+ integrated business applications for sales, marke...NeonNeon is a serverless Postgres platform that provides fully managed, scalable PostgreSQL databases optimized...WorkOSWorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterp...Instabug (Luciq)Instabug — now rebranded as Luciq — is an agentic mobile observability platform covering bug reporting, cra...ChoreoWSO2 Choreo is an enterprise-grade Internal Developer Platform (IDP) and application orchestration platform...ZluriZluri is a SaaS management and operations platform that helps organizations discover, govern, and optimize ...BlockdaemonBlockdaemon is an institutional blockchain infrastructure company founded in 2017 by Konstantin Richter. It...NangoNango.dev is a developer infrastructure platform that simplifies building product integrations with externa...SupabaseSupabase is an open-source Firebase alternative that provides a suite of backend services built on top of P...
Thin 8 Limited public surface area
Lex MachinaLex Machina is a legal analytics platform owned by LexisNexis that transforms raw court documents and docke...CrestaCresta (legally Cresta Intelligence, Inc.) is a Palo Alto, California enterprise Customer Experience AI com...CDataCData Software is a leading provider of data access and connectivity solutions. Our standards-based connect...FluidstackFluidstack is an AI cloud platform that builds and operates high-performance, single-tenant GPU clusters fo...AcadiaAcadia is a Connected Worker Platform designed for employee productivity, acquired by Epicor. It delivers d...AgentOpsAgentOps is an observability, evaluation, and debugging platform for AI agents. Its open-source Python SDK ...BlynkBlynk is a low-code / no-code IoT software platform that helps companies prototype, deploy, and remotely ma...DocuPandaDocuPanda (now also branded DocuPipe, operated by Hoss Inc.) is an AI-powered document intelligence API tha...
Emerging 1 Early or largely undocumented
What Providers Actually Declared
This feature is a canonical term. These are the free-text strings
providers wrote in their own apis.yml that map onto it.
Enterprise SSO, SOC 2 Type II, governance, audit trail, custom integrationsEnterprise custom: unlimited, SOC 2, RBAC, SAML SSO, HIPAA optionEnterprise with custom limits, SAML SSO, SOC 2/HIPAAGDPR + HIPAA + SOC 2GDPR, SOC 2 Type 2, and ISO 27001 certifiedHIPAA on Enterprise; SOC 2 Type IIHIPAA, SOC 2 Type 2, ISO 27001, GDPR-readyHIPAA-aligned data handling and SOC 2 controlsHITRUST and SOC 2ISO/IEC 42001, SOC 2 Type II, ISO 27001, HIPAA, GDPR, TISAX, and CCPA compliance posturePolicy Enforcement (PCI DSS, SOC 2 Type 2)SOC 2SOC 2 / HIPAASOC 2 Type 2SOC 2 Type 2 + GDPR + HIPAA-eligible deploymentSOC 2 Type 2, GDPR, HIPAA-eligibleSOC 2 Type 2, GDPR, and CCPA compliance postureSOC 2 Type 2, ISO 27001, GDPR, HIPAA-readySOC 2 Type 2, ISO 27001, HIPAA, GDPRSOC 2 Type II (June 2025) and ISO 27001 (July 2022) certifications; OFAC compliantSOC 2 Type II (with HIPAA), CJIS 5.9.3/5.9.4, ISO 27001, HIPAA, GDPR, CCPA/CPRA, PCI DSS via StripeSOC 2 Type II CertifiedSOC 2 Type II and PSD2 LicenceSOC 2 Type II certifiedSOC 2 Type II, HIPAA, and ISO 27001 attestations available on the hosted offeringSOC 2 Type II, ISO 27001, GDPR, and CCPA compliantSOC 2 Type II, ISO 27001, PCI-DSS, and US FedRAMP-aligned GovCloud environment (developer.socure.us)SOC 2 Type II, ISO 27001:2022, GDPR, and HIPAA (Enterprise) complianceSOC 2 Type II, ISO/IEC 27001, GDPR, and CCPA complianceSOC 2 Type II, SAML SSO, OAuth SSO, SCIM provisioning, RBAC, regional data pinningSOC 2 and ISO certifications via LexisNexis enterprise security programSOC 2 compliance assistance and custom RBAC on EnterpriseSOC 2 compliant managed cloud infrastructure (Blynk.Cloud)SOC 2, HIPAA, GDPR, CCPA, and DPA compliance with no customer data used for LLM trainingSOC2Scale: $0.222/CU-hour, up to 56 CU fixed, HIPAA/SOC 2Team at $599/mo with SOC 2, SSO, 14-day backups
Scroll for all 37
Work with this as data
Every feature here is available over the APIs.io API and to AI agents over MCP. Features is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.