Registry / SOC 2 Type II

Which AI providers have SOC 2 Type II?

As of 19 August 2026, of 16 AI model offerings tracked, 15 are conditional or gated and 1 has no public evidence.

Conditional, sales-gated, or partial: OpenAI API, Azure OpenAI Service, Anthropic API, Claude via AWS Bedrock, Claude via Google Vertex AI, Gemini via Vertex AI, AWS Bedrock (platform), Mistral La Plateforme, Mistral via Azure AI, Cohere API, Cohere via AWS Bedrock, Llama via AWS Bedrock, Llama via Azure AI, xAI API, DeepSeek via Fireworks AI
No public evidence: DeepSeek API (first-party)

SOC 2 Type II report availability, and how each report is gated, across major AI model offerings. The cell answers: Is a SOC 2 Type II report available for this offering? Statuses below are evidence grades, not endorsements, “no public evidence” means we could not verify it from public sources, not that the answer is no.

OpenAI API first-party API

◐Yes, sales-gated confidence: high · verified 2026-08-19

OpenAI provides a SOC 2 Type II report for its API but it is only downloadable to logged‑in customers via the Trust Portal.

source · full cell

Azure OpenAI Service OpenAI model, served by Microsoft Azure

◐Yes, sales-gated confidence: high · verified 2026-08-17

Microsoft states SOC 2 reports are available via the gated Service Trust Portal, confirming the report exists but is not publicly downloadable.

source · full cell

Anthropic API first-party API

◐Yes, sales-gated confidence: high · verified 2026-08-15

Anthropic lists the SOC 2 Type II report in its Trust Center but requires a request to obtain it, confirming it is not publicly downloadable.

source · full cell

Claude via AWS Bedrock Anthropic model, served by AWS Bedrock

◐Yes, sales-gated confidence: high · verified 2026-08-15

Anthropic’s Trust Center lists a SOC 2 Type II report and requires a request form to view it, confirming the report is available but not public.

source · full cell

Claude via Google Vertex AI Anthropic model, served by Google Cloud Vertex AI

◐Yes, sales-gated confidence: high · verified 2026-08-15

Anthropic lists the SOC 2 Type II report in its Trust Center but gates the PDF behind a request form, confirming the report is available yet not publicly downloadable.

source · full cell

Gemini via Vertex AI Google model, served by Google Cloud Vertex AI

◐Yes, sales-gated confidence: high · verified 2026-08-19

The provider's own page confirms the SOC 2 Type II report covering Generative AI on Vertex AI is served to customers via the Compliance Reports Manager portal, which meets the sales/portal-gated threshold rather than a fully public download.

source · full cell

AWS Bedrock (platform) platform row

◐Yes, sales-gated confidence: high · verified 2026-08-14

AWS lists Amazon Bedrock in‑scope for SOC 2 and states SOC 2 reports are gated behind Artifact login and an NDA

source · full cell

Mistral La Plateforme first-party API

◐Yes, sales-gated confidence: high · verified 2026-08-16

Mistral states the SOC 2 report is available only on request through its Trust Center, confirming the report is not publicly downloadable.

source · full cell

Mistral via Azure AI Mistral AI model, served by Microsoft Azure

◐Yes, sales-gated confidence: high · verified 2026-08-15

Mistral’s own compliance page confirms SOC 2 Type II coverage but states the report is only available on request, making it sales‑gated; platform‑level SOC 2 does not apply to the model.

source · full cell

Cohere API Cohere model, served by Cohere (first-party)

◐Yes, sales-gated confidence: high · verified 2026-08-19

Cohere’s trust center confirms the SOC 2 Type II report exists but is only available after a request, matching a sales‑gated scenario.

source · full cell

Cohere via AWS Bedrock Cohere model, served by AWS Bedrock

◐Yes, sales-gated confidence: high · verified 2026-08-16

Cohere’s own Trust Center confirms a SOC 2 Type II audit exists but the report is only available upon request, making it sales‑gated.

source · full cell

Llama via AWS Bedrock Meta model, served by AWS Bedrock

◔Partial confidence: high · verified 2026-08-14

AWS's own SOC in-scope page confirms Bedrock (platform) is in SOC 2 scope, but the certification covers the serving platform, not the third-party Llama model, so partial is correct per the platform-vs-model rule.

source · full cell

Llama via Azure AI Meta model, served by Microsoft Azure (Azure AI Foundry / Models-as-a-Service)

◔Partial confidence: high · verified 2026-08-15

Azure SOC 2 report lists only Azure, Dynamics 365, Microsoft 365, and Power Platform, so the Llama via Azure AI model is not in scope, yielding only partial coverage.

source · full cell

xAI API xAI model, served by xAI (first-party)

◐Yes, sales-gated confidence: high · verified 2026-08-15

The provider’s own FAQ confirms SOC 2 Type II compliance but states the report is only available to customers with a signed NDA, fitting the sales‑gated definition.

source · full cell

DeepSeek API (first-party) first-party API

○No public evidence confidence: medium · verified 2026-08-17

Search of DeepSeek's official site and review of its privacy policy and terms reveal no public SOC 2 Type II report, and no gated portal was found.

source · full cell

DeepSeek via Fireworks AI DeepSeek model, served by Fireworks AI

◔Partial confidence: high · verified 2026-08-14

Verified the Fireworks trust portal itself lists the SOC 2 Type 2 Report 2025; as a serving-platform certification not covering the DeepSeek model independently, partial is correct.

source · full cell