Posh · Trust Center

Posh Trust Center

Trust center

Posh maintains a public trust center documenting SOC 2 Type II, SOC 3, CSA STAR, and CSA AI Trustworthy Pledge compliance.

Artificial IntelligenceConversational AIAgentic AIBankingCredit UnionsFinancial-ServicesCustomer ServiceContact CenterVoiceChatbotsKnowledge-ManagementRegTech
Trust center: https://security.posh.ai/

Certifications & Compliance

SOC 2 Type IISOC 3CSA STARCSA AI Trustworthy Pledge

Source

Trust Center

posh-trust-center.yml Raw ↑ 
generated: '2026-08-26'
method: searched
probe: true
source: https://security.posh.ai/
url: https://security.posh.ai/
platform: SafeBase (posh.portals.safebase.io)
note: >-
  security.posh.ai is a CNAME to posh.portals.safebase.io. It returns HTTP 403 to a plain
  command-line agent (bot challenge) but renders normally in a browser, so it is live, not dead.
  Content below was read from the rendered page on 2026-08-26.
certifications:
  - name: SOC 2 Type II
    year: '2025'
    note: report available on request through the trust center
  - name: SOC 3
    year: '2025'
  - name: CSA STAR
    note: Cloud Security Alliance STAR, and CSA STAR for AI
  - name: CSA AI Trustworthy Pledge
    year: '2025'
    note: signatory commitment, not a certification
external_ratings:
  - name: SecurityScorecard
    grade: A
  - name: Qualys SSL Labs
    grade: A+
controls_published:
  - multi-factor authentication
  - role-based access control
  - continuous monitoring
  - encryption at rest (AES-256)
  - encryption in transit (TLS 1.2+)
  - penetration testing
  - disaster recovery testing
  - complete audit trails
  - incident response within 72 hours
subprocessors:
  - Google (Google Cloud Platform, Google Gemini)
  - OpenAI
  - Twilio
  - Salesforce
  - Atlassian
  - Deepgram
  - Rime AI
  - Illuma Labs
  - Elastic
  - Supabase
  - Groundcover
  - Unstructured
subprocessor_note: >-
  Union of the subprocessor list rendered on the trust center and the list named in Posh's
  Data Processing Addendum (https://www.posh.ai/data-processing).
certification_pages:
  - https://www.posh.ai/certification/soc-2-attestation
  - https://www.posh.ai/certification/cloud-star-level-1-accreditation
  - https://www.posh.ai/certification/fdic-certified-hosting-partners
  - https://www.posh.ai/certification/audit-planning
evidence:
  - url: https://security.posh.ai/
    status: 403
    note: 403 to curl (bot challenge); rendered successfully via browser-equivalent fetch
  - url: https://www.posh.ai/trust
    status: 200
  - url: https://www.posh.ai/certification/soc-2-attestation
    status: 200

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/posh-trust-center"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.