Trust
Compliance
Certifications, attestations, and audit readiness for regulated industries.
SOC 2 Type II
Annual report available under NDA
ISO/IEC 27001
ISMS certified for control plane operations
HIPAA
BAA available for eligible plans
PCI DSS
Card data handled by Stripe/Razorpay; Zynvora is SAQ-A aligned for SaaS billing
GDPR / CCPA
DPA, SCCs, and consumer rights workflows
FedRAMP
Moderate authorization in progress
Need a signed BAA or DPA?
Enterprise plans include standard legal packets and custom reviews.