Trust & Security

Held to the Same Standard.

We Are Held to the Same
Standard We Audit You Against.

AuditPulse's infrastructure, methodology, and data practices are mapped against the same four frameworks we use to audit our customers. This page is reviewed and updated regularly.

Last Updated: October 6, 2026
COMPLIANCE STATUS
EU AI Act
Mapped & Verified
Compliant

AuditPulse's diagnostic methodology is mapped against all applicable EU AI Act articles. As a compliance tool, we operate as a General Purpose AI system with full transparency obligations met.

Citations: Art. 13, Art. 50
NIST AI RMF 1.1
All Functions Covered
Compliant

GOVERN, MAP, MEASURE and MANAGE functions are all instrumented across our diagnostic and report generation pipeline. Evidence artifacts available on request.

ISO 42001:2023
METHODOLOGY ALIGNED
Aligned

Our audit methodology is designed against the ISO 42001:2023 Clause 4 to 10 requirements and is reviewed annually. AuditPulse does not hold an ISO 42001 certification.

SOC 2 Type II
CRITERIA IMPLEMENTED
In Progress

Security, availability, and confidentiality trust service criteria are implemented and monitored. A formal SOC 2 Type II audit is planned as the company scales.

SECURITY PRACTICES

Your Data

  • - Assessment answers are stored securely to generate your report and, in anonymised aggregate, to build sector benchmarks
  • - Contact details are retained only for service delivery and never sold or shared - deletion available on request
  • - AES-256 encryption in transit and at rest
  • - Zero third-party data selling - ever

Our Stack

  • - Hosted on Vercel - SOC 2 certified
  • - Payments via Stripe - PCI DSS Level 1
  • - Email via Resend - SOC 2 certified
  • - Claude API via Anthropic - enterprise-grade security

Our Audit Logic

  • - Scoring methodology published openly
  • - Framework mappings reviewed quarterly
  • - No black-box scoring - every finding cites a specific regulatory article
  • - Methodology available for customer review on request
Responsible AI Commitment

We Build What We Believe In.

AuditPulse uses AI to generate compliance reports. We hold ourselves to the same transparency and oversight standards we audit others against. Our AI-generated reports are clearly labelled as such, include methodology documentation, and are never presented as legal advice. Every finding in every Verified Audit is validated against the AuditPulse methodology before delivery - citations verified against our authoritative regulatory map, severity ratings checked for consistency, and enforcement timelines confirmed for accuracy.

CONTACT AND REQUESTS

Request Our Methodology Documentation

Enterprise customers can request our full methodology documentation, framework mapping evidence, and infrastructure security overview.

Request Documentation

Report a Security Concern

If you discover a security vulnerability or have concerns about our data practices, please contact our security team directly.

Contact Security Team
Ask Damon