Startups that added a security or compliance certification
In Q4 2026 (to 9 November 2026), 15 startups added a security or compliance certification to their homepage, out of 1,797 with at least two captures in the archive that quarter. These are observations in the archive, not a market-wide rate. Coverage differs by quarter.
| Quarter | Companies with changes | With 2+ captures | Observed share |
|---|---|---|---|
| Q4 2026 · so far | 15 | 1,797 | 0.8% |
| Q3 2026 | 3 | 815 | 0.4% |
| Q2 2026 | 0 | 168 | 0% |
| Q1 2026 | 1 | 401 | 0.2% |
| Q4 2025 | 0 | 61 | 0% |
| Q3 2025 | 4 | 499 | 0.8% |
What counts
The homepage newly states SOC 2, ISO 27001, ISO 13485, HIPAA, FedRAMP, PCI DSS, CE marking or FDA clearance. GDPR is not counted. A change counts in a quarter only when both checks it lies between fall in that quarter; the share is out of the startups with at least two visible captures in that quarter. Two captures do not guarantee a usable comparison, and observation frequency varies. Method.
1,924 observations cannot be allocated to a quarter. Inspect their date ranges. Zero counted changes does not establish that nothing changed.
Dated less precisely
- Didit: Now states SOC 2 compliance on its homepage.
- ControlMonkey: Now states SOC 2 compliance on its homepage.
- Huntress: Now states SOC 2 compliance on its homepage.
- Nightfall AI: Now states SOC 2 compliance on its homepage.
- NetFoundry: Now states FEDRAMP and HIPAA compliance on its homepage.
- Oximy: Now states HIPAA compliance on its homepage.
- CodeKarma: Now states SOC 2 compliance on its homepage.
- env0: Now states SOC 2 compliance on its homepage.
- Ridecell: Now states SOC 2 compliance on its homepage.
- Onshore: Now states SOC 2 compliance on its homepage.
- Chattermill: Now states ISO 27001 compliance on its homepage.
- Genomate Health: Now states HIPAA compliance on its homepage.
- Ambr AI: Now states ISO 27001 compliance on its homepage.
- MedTrainer, Inc.: Now states SOC 2 compliance on its homepage.
- eesel AI: Now states SOC 2 compliance on its homepage.
- BlueOrange: Now states SOC 2 compliance on its homepage.
- Respan: Now states HIPAA, ISO 27001 and SOC 2 compliance on its homepage.
- Clarvo: Now states ISO 27001 and SOC 2 compliance on its homepage.
- Krutrim: Now states ISO 27001 and SOC 2 compliance on its homepage.
- Clumio: Now states HIPAA, ISO 27001 and SOC 2 compliance on its homepage.
- Nyad: Now states ISO 27001 and SOC 2 compliance on its homepage.
- Morta: Now states ISO 27001 compliance on its homepage.
- QRA Corp.: Now states ISO 27001 compliance on its homepage.
- Ambassador: Now states PCI DSS and SOC 2 compliance on its homepage.
- Artera: Now states FEDRAMP and SOC 2 compliance on its homepage.
- Birdstop: Now states SOC 2 compliance on its homepage.
- RegDoor: Now states SOC 2 compliance on its homepage.
- Kognic AB: Now states ISO 27001 compliance on its homepage.
- Enzai: Now states ISO 27001 compliance on its homepage.
- Addigy: Now states HIPAA and SOC 2 compliance on its homepage.
- ContraForce: Now states SOC 2 compliance on its homepage.
- EMPE Diagnostics AB: Now states ISO 13485 compliance on its homepage.
- ContractPodAi (Leah): Now states SOC 2 compliance on its homepage.
- CopyCat AI: Now states SOC 2 compliance on its homepage.
- CoverGo: Now states SOC 2 compliance on its homepage.
- SeekOut: Now states SOC 2 compliance on its homepage.
- Rippletide: Now states SOC 2 compliance on its homepage.
- Noxus: Now states ISO 27001 and SOC 2 compliance on its homepage.
- MOVEdot: Now states SOC 2 compliance on its homepage.
- Warrant: Now states HIPAA and SOC 2 compliance on its homepage.
Cite this page
StartupHistory, “Startups that added a security or compliance certification”, https://startuphistory.org/t/added-compliance (accessed 9 November 2026)