> ## Documentation Index
> Fetch the complete documentation index at: https://hercules.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance Certifications

> Review Hercules's SOC 2 Type 1 report, SOC 2 Type 2 progress, GDPR compliance, ISO 27001 plans, HIPAA roadmap, and options for additional security audits.

Hercules has completed SOC 2 Type 1 and is GDPR compliant. Review our [Trust Center](https://trust.hercules.app) for security controls and supporting documentation.

### What certifications and audits does Hercules have?

| Standard | Status |
| - | - |
| SOC 2 Type 1 | Audit complete. [View our report in the Trust Center](https://trust.hercules.app). |
| SOC 2 Type 2 | Currently in the monitoring period. Expected by February 2027. |
| GDPR | Compliant. [View our auditor's attestation in the Trust Center](https://trust.hercules.app). |
| ISO 27001 | Certification in progress. |
| HIPAA | Compliance review in progress. Expected by February 2027. |

### Where can I see Hercules's full compliance reports?

Visit our [Trust Center](https://trust.hercules.app) and email [sales@hercules.app](mailto:sales@hercules.app) to request additional documents.

### When is Hercules SOC 2 Type 2 coming?

We are currently in the monitoring period and expect the audit to be finalized by February 2027. SOC 2 Type 1 assesses the design of controls at a point in time. Type 2 also tests whether those controls operate effectively over a period of time.

### Can Hercules complete additional security audits or questionnaires?

Yes. We are happy to discuss additional audits and complete security questionnaires for enterprise customers. Send your requirements to [sales@hercules.app](mailto:sales@hercules.app) so we can agree on scope and timing.

### Is Hercules compliant with privacy frameworks in other countries?

Hercules self-attests to compliance with these privacy frameworks:

| Country | Framework |
| - | - |
| Australia | Privacy Act and Australian Privacy Principles (APPs) |
| South Africa | Protection of Personal Information Act (POPIA) |
| Canada | Personal Information Protection and Electronic Documents Act (PIPEDA) |
| South Korea | Personal Information Protection Act (PIPA) |
| India | Digital Personal Data Protection Act (DPDP Act) |

These are Hercules self-attestations, not independent certifications. Email [sales@hercules.app](mailto:sales@hercules.app) to discuss your regional requirements, request supporting information, or arrange additional audits.

### Additional FAQ

> **Do the apps I build on Hercules also inherit this compliance?**
>
> These audits and attestations cover the Hercules platform. Your app needs its own assessment and
> any certifications required for its use case. Hercules can help you work toward these. We design
> our platform with the highest security and compliance standards in mind.

> **What if I need an additional certification?**
>
> Please reach out to [sales@hercules.app](mailto:sales@hercules.app). We may already meet your
> requirements and can confirm the applicable certification or compliance status.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.