Last checked:
Which AI tools have SOC 2?
SOC 2 is an independent audit of a vendor's security controls. These are the AI tools where an official page confirms a SOC 2 report.
- ChatGPT SOC 2: Business (yes (Type 2)); Enterprise (yes (Type 2))
- OpenAI API SOC 2: API Platform (yes (Type 2))
- Claude SOC 2: Team (yes (Type I & II); ISO 27001, ISO 42001)
- Gemini SOC 2: in Google Workspace (yes (Gemini has SOC 1/2/3))
- GitHub Copilot SOC 2: Business / Enterprise (yes (SOC 2 Type II; Copilot Business and Enterprise in scope))
- Perplexity SOC 2: Enterprise Pro / Max (yes (Type II))
- Otter.ai SOC 2: Free / Pro (yes (Type 2)); Business (yes (Type 2))
- Fireflies.ai SOC 2: all plans (yes (Type II))
- Fathom SOC 2: Free / Team (yes (Type II))
- Zoom AI Companion SOC 2: paid Zoom plans (yes (Type 2, Oct 2024–Oct 2025 period))
- Granola SOC 2: Individual / Business (yes (Type 2))
- Notion AI SOC 2: Business / Enterprise (yes (Type 2; Notion AI in scope))
- Grammarly SOC 2: Free / Pro (yes (Type 2, company-wide)); Business / Enterprise (via Sales) (yes (Type 2))
- Adobe Firefly SOC 2: Firefly (Creative Cloud / business) (yes (Type 2; Firefly is in Creative Cloud for enterprise scope))
- Jasper SOC 2: all plans (yes (listed))
- HubSpot Breeze SOC 2: all plans (yes (SOC 2 Type 2; SOC 3 public))
- Intercom Fin SOC 2: Fin AI Agent (yes (Type II); ISO 27001/42001)
- Descript SOC 2: all plans (yes (Type II))
- Gamma SOC 2: Business / Enterprise (yes (Type II; documentation on request for Business) - seen in search result text from gamma.app/pricing; page blocked our direct fetch)