Puzzle Trust Center

generated: '2026-07-20'
method: searched
probe: true
url: https://trust.puzzle.io
source:
- https://trust.puzzle.io
- https://puzzle.io/security
- https://puzzle-api.readme.io/docs/welcome
certifications:
- SOC 2
compliance_posture:
- Append-only / immutable ledger (audit-ready by design)
- AES 256-bit encryption at rest
- Read-only third-party data integrations
infrastructure_partners:
- Cloudflare
- Google Cloud
- Stripe
- Auth0
- 1Password
- Plaid
- Finicity
evidence:
- source: https://trust.puzzle.io
  keywords: [puzzle trust center]
- source: https://puzzle.io/security
  keywords: [soc 2, aes 256, encryption]
- source: https://puzzle-api.readme.io/docs/welcome
  keywords: ['soc 2-compliant', immutable ledger, audit-ready]
notes: >-
  Puzzle publishes a Trust Center at trust.puzzle.io (verified page header "Puzzle Trust
  Center"; the detailed certification grid is JS-rendered). SOC 2 compliance is stated
  across the security page and developer docs. No public bug-bounty program was found;
  vulnerability contact is security@puzzle.io (see security/puzzle-vulnerability-disclosure.yml).