Levity Trust Center

generated: '2026-07-19'
method: searched
probe: true
url: https://trust.levity.ai/
platform: Vanta
certifications:
- name: ISO 27001
  status: certified
  source: https://levity.ai/en/security
- name: SOC 2 Type II
  status: certified
  report_access: available on request via the Trust Center
  source: https://levity.ai/en/security
compliance:
- name: GDPR
  status: compliant
  source: https://levity.ai/en/security
- name: DPA
  status: published
  url: https://levity.ai/en/legal/dpa
not_claimed:
- HIPAA
- PCI DSS
- FedRAMP
- ISO 27017
- ISO 27018
security_posture:
  infrastructure: private clouds on AWS, Google Cloud and Microsoft Azure
  encryption: HTTPS for all network interactions; sensitive data encrypted in transit
    and at rest
  authentication: delegated to WorkOS (Levity does not store passwords)
  payments: handled by third-party processors (Stripe, Paddle); Levity stores no payment
    information
  source: https://levity.ai/en/security
evidence:
- source: https://trust.levity.ai/
  status: 200
  kind: trust-center
  detail: Live Vanta-hosted Trust Center (content rendered client-side; the certification
    list below is taken from the linked security page rather than scraped from the
    Vanta shell).
- source: https://levity.ai/en/security
  status: 200
  kind: security-page
  keywords: [iso 27001, soc 2 type ii, gdpr, trust center]
notes:
- No subprocessor list was found at a public URL (/en/legal/sub-processors was not
  resolvable); subprocessors are presumably disclosed inside the Vanta Trust Center
  after access request.