Feature
SOC 2
Independently audited SOC 2 controls.
34 providers
403 APIs
34 declared variants
The provider holds a SOC 2 Type I or II attestation covering security and related trust criteria. Usually the first artifact an enterprise security review asks for.
34 API providers on the APIs.io network offer soc 2. The highest-rated are CData, Junction, Merge, UserGems, Unified.to.
Providers
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 6 Complete, well-documented, and agent-ready
CDataCData Software is a leading provider of data access and connectivity solutions. Our standards-based connect...JunctionJunction (formerly Vital, and tryVital before that) is a health-data API platform that gives digital-health...MergeMerge is the connective infrastructure for production AI. The Merge Unified API offers one API surface acro...UserGemsUserGems is a San Francisco-based sales intelligence platform that tracks champion job changes and surfaces...Unified.toUnified is a real-time unified API platform that provides access to over 360 integrations across 22 categor...RegalRegal is a New York City-based AI Agent Platform purpose-built for contact center operations. The Regal pla...
Strong 12 Solid coverage with minor gaps
VercelVercel is a cloud platform that helps developers build, deploy, and scale modern web applications quickly a...TinkTink, a Visa solution acquired in 2022, is a European Open Banking platform with 6,000+ bank connections ac...ZohoZoho is a comprehensive cloud software suite offering 55+ integrated business applications for sales, marke...SocureSocure is the leading vertically-integrated digital identity verification and fraud-prevention platform, us...RedoxRedox is a healthcare data interoperability platform, founded in 2014 and headquartered in Madison, Wiscons...WorkOSWorkOS is the "Enterprise Ready" identity platform for B2B SaaS — providing AuthKit user management, enterp...AffindaAffinda is an Intelligent Document Processing (IDP) platform that uses AI to extract structured data from d...NeonNeon is a serverless Postgres platform that provides fully managed, scalable PostgreSQL databases optimized...Highlight (highlight.io)Highlight (highlight.io) is the open-source, full-stack monitoring platform — session replay, error monitor...OxylabsOxylabs is a Lithuanian (Vilnius-based) web intelligence platform providing premium proxy networks (Residen...ChoreoWSO2 Choreo is an enterprise-grade Internal Developer Platform (IDP) and application orchestration platform...BlockdaemonBlockdaemon is an institutional blockchain infrastructure company founded in 2017 by Konstantin Richter. It...
Developing 9 Usable, with meaningful gaps to close
FilevineFilevine is the leading legal case management and operating intelligence platform for plaintiff, personal-i...Bright DataBright Data is an Israeli web data platform and operator of the world's largest legitimate residential prox...EncoreEncore is a backend application framework and developer cloud that lets engineering teams build type-safe d...NangoNango.dev is a developer infrastructure platform that simplifies building product integrations with externa...SupabaseSupabase is an open-source Firebase alternative that provides a suite of backend services built on top of P...OuraOura is a health-technology company that makes the Oura Ring — a titanium smart ring packed with PPG, body-...DocuPipeDocuPipe (formerly DocuPanda, operated by Hoss Inc.) is an AI-powered document intelligence API that conver...ZluriZluri is a SaaS management and operations platform that helps organizations discover, govern, and optimize ...Instabug (Luciq)Instabug — now rebranded as Luciq — is an agentic mobile observability platform covering bug reporting, cra...
Thin 6 Limited public surface area
ScenarioScenario is a Paris- and San Francisco-headquartered AI platform for game asset generation founded in 2021 ...CrestaCresta (legally Cresta Intelligence, Inc.) is a Palo Alto, California enterprise Customer Experience AI com...Lex MachinaLex Machina is a legal analytics platform owned by LexisNexis that transforms raw court documents and docke...BlynkBlynk is a low-code / no-code IoT software platform that helps companies prototype, deploy, and remotely ma...AcadiaAcadia is a Connected Worker Platform designed for employee productivity, acquired by Epicor. It delivers d...FluidstackFluidstack is an AI cloud platform that builds and operates high-performance, single-tenant GPU clusters fo...
Emerging 1 Early or largely undocumented
What Providers Actually Declared
This feature is a canonical term. These are the free-text strings
providers wrote in their own apis.yml that map onto it.
Enterprise SSO, SOC 2 Type II, governance, audit trail, custom integrationsEnterprise custom: unlimited, SOC 2, RBAC, SAML SSO, HIPAA optionEnterprise with custom limits, SAML SSO, SOC 2/HIPAAGDPR + HIPAA + SOC 2GDPR, SOC 2 Type 2, and ISO 27001 certifiedHIPAA, SOC 2 Type 2, ISO 27001, GDPR-readyHIPAA-aligned data handling and SOC 2 controlsHITRUST and SOC 2ISO/IEC 42001, SOC 2 Type II, ISO 27001, HIPAA, GDPR, TISAX, and CCPA compliance posturePolicy Enforcement (PCI DSS, SOC 2 Type 2)SOC 2SOC 2 / HIPAASOC 2 Type 2SOC 2 Type 2, GDPR, HIPAA-eligibleSOC 2 Type 2, GDPR, and CCPA compliance postureSOC 2 Type 2, ISO 27001, GDPR, HIPAA-readySOC 2 Type 2, ISO 27001, HIPAA, GDPRSOC 2 Type II (June 2025) and ISO 27001 (July 2022) certifications; OFAC compliantSOC 2 Type II (with HIPAA), CJIS 5.9.3/5.9.4, ISO 27001, HIPAA, GDPR, CCPA/CPRA, PCI DSS via StripeSOC 2 Type II CertifiedSOC 2 Type II and PSD2 LicenceSOC 2 Type II, HIPAA, and ISO 27001 attestations available on the hosted offeringSOC 2 Type II, ISO 27001, GDPR, and CCPA compliantSOC 2 Type II, ISO 27001, PCI-DSS, and US FedRAMP-aligned GovCloud environment (developer.socure.us)SOC 2 Type II, ISO 27001:2022, GDPR, and HIPAA (Enterprise) complianceSOC 2 Type II, ISO/IEC 27001, GDPR, and CCPA complianceSOC 2 Type II, SAML SSO, OAuth SSO, SCIM provisioning, RBAC, regional data pinningSOC 2 and ISO certifications via LexisNexis enterprise security programSOC 2 compliance assistance and custom RBAC on EnterpriseSOC 2 compliant managed cloud infrastructure (Blynk.Cloud)SOC 2, HIPAA, GDPR, CCPA, and DPA compliance with no customer data used for LLM trainingSOC2Scale: $0.222/CU-hour, up to 56 CU fixed, HIPAA/SOC 2Team at $599/mo with SOC 2, SSO, 14-day backups
Scroll for all 34
Work with this as data
Every feature here is available over the APIs.io API and to AI agents over MCP. Features is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.