Registry / SOC 2 Type II

Which AI providers have SOC 2 Type II?

As of 3 October 2026, of 16 AI model offerings tracked, 15 are conditional or gated and 1 has no public evidence.

Conditional, sales-gated, or partial: OpenAI API, Azure OpenAI Service, Anthropic API, Claude via AWS Bedrock, Claude via Google Vertex AI, Gemini via Vertex AI, AWS Bedrock (platform), Mistral La Plateforme, Mistral via Azure AI, Cohere API, Cohere via AWS Bedrock, Llama via AWS Bedrock, Llama via Azure AI, xAI API, DeepSeek via Fireworks AI
No public evidence: DeepSeek API (first-party)

SOC 2 Type II report availability, and how each report is gated, across major AI model offerings. The cell answers: Is a SOC 2 Type II report available for this offering? Statuses below are evidence grades, not endorsements, “no public evidence” means we could not verify it from public sources, not that the answer is no.

OpenAI API first-party API

◐Yes, sales-gated confidence: high · verified 2026-10-02

OpenAI’s Trust Portal confirms a SOC 2 Type II report exists but is gated behind a customer login.

source · full cell

Azure OpenAI Service OpenAI model, served by Microsoft Azure

◐Yes, sales-gated confidence: high · verified 2026-09-30

Microsoft’s official blog states Azure OpenAI meets SOC 2, and SOC 2 reports are only available through the gated Service Trust Portal, so the report exists but is sales‑gated.

source · full cell

Anthropic API first-party API

◐Yes, sales-gated confidence: high · verified 2026-10-03

The SOC 2 Type II report is listed in Anthropic's Trust Center but is only obtainable after submitting a request‑access form, confirming it is not publicly downloadable.

source · full cell

Claude via AWS Bedrock Anthropic model, served by AWS Bedrock

◐Yes, sales-gated confidence: high · verified 2026-09-27

Audit confirmed: trust.anthropic.com is Anthropic's own Trust Center showing SOC 2 Type 2 in scope with the "Type 2 SOC 2 and CSA STAR L2 Report.pdf" resource, but sensitive documents (including the report) require a request-access form, so the recorded value stands as yes_sales_gated.

source · full cell

Claude via Google Vertex AI Anthropic model, served by Google Cloud Vertex AI

◐Yes, sales-gated confidence: high · verified 2026-10-03

Anthropic’s Trust Center lists SOC 2 Type II coverage for Claude and the report is only available after a gated request, confirming sales‑gated availability.

source · full cell

Gemini via Vertex AI Google model, served by Google Cloud Vertex AI

◐Yes, sales-gated confidence: high · verified 2026-10-01

Google Cloud lists Gemini (via Vertex AI) in the SOC 2 Type II scope and states reports are available through the Compliance Reports Manager, which requires portal access, confirming availability but behind a gate.

source · full cell

AWS Bedrock (platform) platform row

◐Yes, sales-gated confidence: high · verified 2026-09-28

AWS SOC 2 report exists and covers Bedrock, but is only provided via AWS Artifact behind an NDA, matching yes_sales_gated

source · full cell

Mistral La Plateforme first-party API

◐Yes, sales-gated confidence: high · verified 2026-09-28

Mistral lists a SOC 2 Type II Full Report in its Trust Center but requires a request for access, confirming the report is gated rather than public.

source · full cell

Mistral via Azure AI Mistral AI model, served by Microsoft Azure

◐Yes, sales-gated confidence: high · verified 2026-10-01

Mistral’s own trust center lists a SOC 2 Type II report that must be requested, confirming the report exists but is not publicly downloadable.

source · full cell

Cohere API Cohere model, served by Cohere (first-party)

◐Yes, sales-gated confidence: high · verified 2026-10-01

The provider’s own Trust Center confirms the SOC 2 Type II audit exists but the report must be requested, matching a sales‑gated availability.

source · full cell

Cohere via AWS Bedrock Cohere model, served by AWS Bedrock

◐Yes, sales-gated confidence: high · verified 2026-09-29

Cohere’s Trust Center confirms the SOC 2 Type II audit exists but the report is only obtainable by request, matching the sales‑gated classification.

source · full cell

Llama via AWS Bedrock Meta model, served by AWS Bedrock

◔Partial confidence: high · verified 2026-09-27

AWS's own services-in-scope page lists Amazon Bedrock as in scope for SOC 1/2/3, but the third-party Llama model is not individually certified, so per the platform-vs-model rule this is partial.

source · full cell

Llama via Azure AI Meta model, served by Microsoft Azure (Azure AI Foundry / Models-as-a-Service)

◔Partial confidence: high · verified 2026-09-27

The Azure SOC 2 Type II report lists only Azure core services and excludes Llama, so the offering is only partially covered

source · full cell

xAI API xAI model, served by xAI (first-party)

◐Yes, sales-gated confidence: high · verified 2026-10-03

xAI confirms SOC 2 Type II compliance but states the report is only accessible to customers with a signed NDA, fitting the yes_sales_gated category.

source · full cell

DeepSeek API (first-party) first-party API

○No public evidence confidence: medium · verified 2026-09-30

The cited page is DeepSeek's own authoritative privacy policy containing the quoted security-measures language, and no public evidence of a DeepSeek SOC 2 Type II report was found on the provider's domain or elsewhere.

source · full cell

DeepSeek via Fireworks AI DeepSeek model, served by Fireworks AI

◔Partial confidence: medium · verified 2026-09-28

Per the model-via-platform certification rule, trust.fireworks.ai/resources lists "SOC 2 Type 2 Report 2025" as Fireworks' platform certificate, but since DeepSeek's developer has no own SOC 2 to certify the model, the offering is only partially covered (partial), with the request-gated access noted

source · full cell