Certifications named
Naming SOC 2 or ISO 27001 publicly is the low bar; not naming them is a signal.
2014 of 8390 companies we measured publish it, that is 24%. Last checked 2026-10-17.
How the company counts work
Every figure on this page counts companies, not product entries. A company with several products counts once. A finding at any of its products places that company in the found group.
Weight in the transparency score: . See how we score · back to all criteria.
- Found2,014
- Not found at checked addresses6,376
- Not measured501
8,891 companies in total. Unmeasured companies are excluded from the published share.
Find the evidence in your category
Share of measured companies with a finding. Open a category for every vendor and source.
Categories 1–12 of 210
- Accounting11% 8 of 74 companies measured View vendors and sources →
- Affiliate and partner marketing10% 4 of 42 companies measured View vendors and sources →
- API management35% 16 of 46 companies measured View vendors and sources →
- API security25% 5 of 20 companies measured View vendors and sources →
- Applicant tracking38% 17 of 45 companies measured View vendors and sources →
- Association management5% 2 of 38 companies measured View vendors and sources →
- Auto repair shop management3% 1 of 34 companies measured View vendors and sources →
- Automotive retail software6% 3 of 48 companies measured View vendors and sources →
- Aviation maintenance software14% 4 of 29 companies measured View vendors and sources →
- Background screening41% 14 of 34 companies measured View vendors and sources →
- Backup and recovery30% 11 of 37 companies measured View vendors and sources →
- Behavioral health8% 2 of 26 companies measured View vendors and sources →
What exactly they state
We do not only record THAT they publish this, but WHAT: the figure, the name, the location, with the sentence it stands in. Each link below lists every vendor carrying that value.
Certification named
Which vendors name this certification for themselves on a public page?
- SOC 2 Type II 507
- ISO/IEC 27001 441
- SOC 2 297
- HIPAA 155
- PCI DSS 75
- Cyber Essentials 46
- ISO/IEC 27701 41
- ISO/IEC 27017 40
- CSA STAR 36
- ISO 9001 35
- FedRAMP 26
- ISO/IEC 27018 23
- HITRUST CSF 16
- ISO 22301 15
- TISAX 9
These are quotes and they do not enter the score. All measured detail.
Published
SOC 2 or ISO 27001 named on a public page.
2,014 companies published it. Too many to list on one page. The full list is split by category above, and every single result is also on the vendor profile it belongs to.
No named certification found.
We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.
6,376 companies were reached and did not carry it at the addresses we checked. Too many to list on one page. The full list is split by category above, and every single result is also on the vendor profile it belongs to.
Not measured
We could not reach these vendors, or their robots.txt asks us not to. This says something about our measurement, not about them. They are left out of the percentage above.
501 companies could not be measured by us. Too many to list on one page. The full list is split by category above, and every single result is also on the vendor profile it belongs to.
Found something we missed? Tell us. A correction moves that vendor into our next nightly run. That run reads the same fixed addresses we check for every vendor, not the address you send.