Compliance & Data Governance

SOC 2 Type II Readiness

Our controls are designed to meet SOC 2 Type II trust service criteria — security, availability, processing integrity, confidentiality, and privacy. We are actively working toward formal SOC 2 Type II attestation with a qualified independent auditor.

• ✓Control environment mapped to AICPA Trust Service Criteria
• ✓Access controls, change management, and data handling procedures documented
• ✓Independent third-party audit in progress

ISO 27001-Aligned Controls

Our information security management system follows the ISO/IEC 27001 framework. Controls span physical security, access management, cryptography, operations security, communications security, and supplier relationships.

• ✓Risk assessment and treatment methodology
• ✓Documented information security policies and procedures
• ✓Regular management reviews and continuous improvement

Data Governance

FullPipeline.ai implements enterprise-grade data governance including data classification, retention policies, cross-border data transfer controls, and configurable data residency options for enterprise customers.

Privacy & Regulation

We support compliance with GDPR, CCPA, and other regional privacy regulations. Data processing agreements (DPAs) are available for enterprise customers, and data subject access requests are handled through automated workflows.