Fragment · Trust Center

Fragment Trust Center

Trust center

Fragment maintains a public trust center documenting SOC 2 Type II compliance.

CompanyLedgerAccountingPaymentsFintechDouble-EntryMoney MovementGraphQLFinancial InfrastructureReconciliation
Trust center: https://fragment.dev/security

Certifications & Compliance

SOC 2 Type II

Source

Trust Center

fragment-trust-center.yml Raw ↑
generated: '2026-07-19'
method: searched
probe: false
source: https://fragment.dev/security
url: https://fragment.dev/security
trust_profile: https://app.vanta.com
certifications:
- SOC 2 Type II
posture:
- Policies covering the full SDLC and operations.
- Role-based access control with granular permissions.
- Encryption at rest across networks, cloud storage, databases, and backups.
- Continuous vulnerability scanning and supply-chain monitoring.
- Real-time encrypted backup and disaster recovery.
evidence:
- source: https://fragment.dev/security
  keywords: [soc 2 type ii, vanta, encryption at rest, vulnerability scanning]
notes:
- Trust profile hosted on Vanta (app.vanta.com); ISO 27001/PCI/HIPAA not claimed on the public security page.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/fragment-trust-center"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.