Data Security & Compliance

Certification coverage is uneven across the six providers tracked. Anthropic, OpenAI, Google, and Microsoft each publicly document all four benchmarks checked: SOC 2 Type II, ISO 27001, a GDPR DPA, and a HIPAA BAA, per their trust pages. Mistral AI documents three of four, with no public HIPAA BAA. Perplexity Enterprise documents only two, SOC 2 Type II and HIPAA BAA, with no confirmed ISO 27001 or GDPR DPA. A missing attestation isn't proof of a gap, but it means asking the vendor rather than assuming from a trust page.