Feature
SOC 2
Independently audited SOC 2 controls.
34 providers
410 APIs
34 declared variants
The provider holds a SOC 2 Type I or II attestation covering security and related trust criteria. Usually the first artifact an enterprise security review asks for.
34 API providers on the APIs.io network offer soc 2. The highest-rated are Regal, CData, Vital, Merge, UserGems.
Providers
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 5 Complete, well-documented, and agent-ready
RegalRegal is a New York City-based AI Agent Platform purpose-built for contact center operations. The Regal pla...CDataCData Software is a leading provider of data access and connectivity solutions. Our standards-based connect...VitalVital (now operating as Junction, formerly tryVital) is a health-data API platform that gives digital-healt...MergeMerge is the connective infrastructure for production AI. The Merge Unified API offers one API surface acro...UserGemsUserGems is a San Francisco-based sales intelligence platform that tracks champion job changes and surfaces...
Strong 11 Solid coverage with minor gaps
TinkTink, a Visa solution acquired in 2022, is a European Open Banking platform with 6,000+ bank connections ac...Highlight (highlight.io)Highlight (highlight.io) is the open-source, full-stack monitoring platform — session replay, error monitor...Unified.toUnified is a real-time unified API platform that provides access to over 360 integrations across 22 categor...AffindaAffinda is an Intelligent Document Processing (IDP) platform that uses AI to extract structured data from d...SocureSocure is the leading vertically-integrated digital identity verification and fraud-prevention platform, us...RedoxRedox is a healthcare data interoperability platform, founded in 2014 and headquartered in Madison, Wiscons...WorkOSWorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterp...FilevineFilevine is the leading legal case management and operating intelligence platform for plaintiff, personal-i...OuraOura is a health-technology company that makes the Oura Ring — a titanium smart ring packed with PPG, body-...ZohoZoho is a comprehensive cloud software suite offering 55+ integrated business applications for sales, marke...VercelVercel is a cloud platform that helps developers build, deploy, and scale modern web applications quickly a...
Developing 10 Usable, with meaningful gaps to close
EncoreEncore is a backend application framework and developer cloud that lets engineering teams build type-safe d...OxylabsOxylabs is a Lithuanian (Vilnius-based) web intelligence platform providing premium proxy networks (Residen...Instabug (Luciq)Instabug — now rebranded as Luciq — is an agentic mobile observability platform covering bug reporting, cra...Bright DataBright Data is an Israeli web data platform and operator of the world's largest legitimate residential prox...NeonNeon is a serverless Postgres platform that provides fully managed, scalable PostgreSQL databases optimized...ChoreoWSO2 Choreo is an enterprise-grade Internal Developer Platform (IDP) and application orchestration platform...BlockdaemonBlockdaemon is an institutional blockchain infrastructure company founded in 2017 by Konstantin Richter. It...ZluriZluri is a SaaS management and operations platform that helps organizations discover, govern, and optimize ...NangoNango.dev is a developer infrastructure platform that simplifies building product integrations with externa...SupabaseSupabase is an open-source Firebase alternative that provides a suite of backend services built on top of P...
Thin 6 Limited public surface area
Lex MachinaLex Machina is a legal analytics platform owned by LexisNexis that transforms raw court documents and docke...CrestaCresta (legally Cresta Intelligence, Inc.) is a Palo Alto, California enterprise Customer Experience AI com...FluidstackFluidstack is an AI cloud platform that builds and operates high-performance, single-tenant GPU clusters fo...AcadiaAcadia is a Connected Worker Platform designed for employee productivity, acquired by Epicor. It delivers d...BlynkBlynk is a low-code / no-code IoT software platform that helps companies prototype, deploy, and remotely ma...DocuPandaDocuPanda (now also branded DocuPipe, operated by Hoss Inc.) is an AI-powered document intelligence API tha...
What Providers Actually Declared
This feature is a canonical term. These are the free-text strings
providers wrote in their own apis.yml that map onto it.
Enterprise SSO, SOC 2 Type II, governance, audit trail, custom integrationsEnterprise custom: unlimited, SOC 2, RBAC, SAML SSO, HIPAA optionEnterprise with custom limits, SAML SSO, SOC 2/HIPAAGDPR + HIPAA + SOC 2GDPR, SOC 2 Type 2, and ISO 27001 certifiedHIPAA, SOC 2 Type 2, ISO 27001, GDPR-readyHIPAA-aligned data handling and SOC 2 controlsHITRUST and SOC 2ISO/IEC 42001, SOC 2 Type II, ISO 27001, HIPAA, GDPR, TISAX, and CCPA compliance posturePolicy Enforcement (PCI DSS, SOC 2 Type 2)SOC 2SOC 2 / HIPAASOC 2 Type 2SOC 2 Type 2, GDPR, HIPAA-eligibleSOC 2 Type 2, GDPR, and CCPA compliance postureSOC 2 Type 2, ISO 27001, GDPR, HIPAA-readySOC 2 Type 2, ISO 27001, HIPAA, GDPRSOC 2 Type II (June 2025) and ISO 27001 (July 2022) certifications; OFAC compliantSOC 2 Type II (with HIPAA), CJIS 5.9.3/5.9.4, ISO 27001, HIPAA, GDPR, CCPA/CPRA, PCI DSS via StripeSOC 2 Type II CertifiedSOC 2 Type II and PSD2 LicenceSOC 2 Type II, HIPAA, and ISO 27001 attestations available on the hosted offeringSOC 2 Type II, ISO 27001, GDPR, and CCPA compliantSOC 2 Type II, ISO 27001, PCI-DSS, and US FedRAMP-aligned GovCloud environment (developer.socure.us)SOC 2 Type II, ISO 27001:2022, GDPR, and HIPAA (Enterprise) complianceSOC 2 Type II, ISO/IEC 27001, GDPR, and CCPA complianceSOC 2 Type II, SAML SSO, OAuth SSO, SCIM provisioning, RBAC, regional data pinningSOC 2 and ISO certifications via LexisNexis enterprise security programSOC 2 compliance assistance and custom RBAC on EnterpriseSOC 2 compliant managed cloud infrastructure (Blynk.Cloud)SOC 2, HIPAA, GDPR, CCPA, and DPA compliance with no customer data used for LLM trainingSOC2Scale: $0.222/CU-hour, up to 56 CU fixed, HIPAA/SOC 2Team at $599/mo with SOC 2, SSO, 14-day backups
Scroll for all 34
Work with this as data
Every feature here is available over the APIs.io API and to AI agents over MCP. Features is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.