Leah · Trust Center

Leah Trust Center

Trust center

Leah maintains a public trust center documenting ISO/IEC 27001:2022, SOC 2 Type II, SOC 3, SOC 1, GDPR, HIPAA / HITECH, and TISAX compliance.

CompanyArtificial IntelligenceAgentic AIContract Lifecycle ManagementLegalLegal TechnologyProcurementSource-to-PayFinanceEnterprise Software
Trust center: https://leahai.com/trust-portal

Certifications & Compliance

ISO/IEC 27001:2022SOC 2 Type IISOC 3SOC 1GDPRHIPAA / HITECHTISAX

Source

Trust Center

leah-trust-center.yml Raw ↑
generated: '2026-07-19'
method: searched
source: https://leahai.com/trust-portal
name: Leah Trust Portal
url: https://leahai.com/trust-portal
company: ContractPod Technologies Limited
address: 2 Kingdom Street, 2nd Floor, London, W2 6BD, United Kingdom
contact: connect@leahai.com
self_serve: false
notes: >-
  Leah (formerly ContractPodAi) publishes a Trust Portal listing named
  certifications and audit reports. Several reports are gated — available on
  request or under NDA — rather than downloadable. The company states it is a
  five-time Gartner CLM Visionary and SOC 2 Type II certified in its own llms.txt.
certifications:
- name: ISO/IEC 27001:2022
  status: certified
  evidence: Certificate listed on the Trust Portal.
- name: SOC 2 Type II
  status: certified
  evidence: >-
    Asserted in https://leahai.com/llms.txt ("SOC 2 Type II certified") and in the
    Trust Portal's SOC audit materials.
- name: SOC 3
  status: report_available
  evidence: SOC Type 3 report listed on the Trust Portal.
- name: SOC 1
  status: report_available
  evidence: SOC 1 audit information referenced from the Trust Portal listing in llms.txt.
- name: GDPR
  status: audited
  evidence: GDPR audit report (July 2023) listed on the Trust Portal.
- name: HIPAA / HITECH
  status: report_on_request
  evidence: Report available upon request per the Trust Portal.
- name: TISAX
  status: report_available
  evidence: TISAX report listed on the Trust Portal.
practices:
- penetration_testing: annual independent penetration testing
  evidence: >-
    Trust Portal — results are "fed into our Vulnerability Management Program and
    remediated in accordance with our policy timelines."
- vulnerability_management: documented Vulnerability Management Program with policy timelines
  evidence: https://leahai.com/trust-portal
- hosting: Microsoft Azure
  evidence: >-
    Trust Portal links to Azure security fundamentals and physical security
    documentation as the underlying infrastructure controls.
documents:
- name: Security Information Datasheet
  url: https://leahai.com/resources2/security-information-datasheet
  status: 200
- name: Data Processing Addendum
  url: https://leahai.com/dpa
  status: 200
- name: Privacy Statement
  url: https://leahai.com/privacy-statement
  status: 200
- name: Master Terms
  url: https://leahai.com/master-terms
  status: 200
- name: Legal document hub
  url: https://leahai.com/legal
  status: 200
- name: AI Governance
  url: https://leahai.com/ai-governance
  status: 200

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/leah-trust-center"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.