> ## Documentation Index
> Fetch the complete documentation index at: https://hercules.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance Certifications

> Review Hercules's SOC 2 Type 1 report, SOC 2 Type 2 progress, GDPR compliance, ISO 27001 plans, HIPAA roadmap, and options for additional security audits.

Hercules has completed SOC 2 Type 1 and is GDPR compliant. Review our [Trust Center](https://trust.hercules.app) for security controls and supporting documentation.

### What certifications and audits does Hercules have?

| Standard | Status |
| - | - |
| SOC 2 Type 1 | Audit complete. [View our report in the Trust Center](https://trust.hercules.app). |
| SOC 2 Type 2 | Currently in the monitoring period. Expected by February 2027. |
| GDPR | Compliant. [View our auditor's attestation in the Trust Center](https://trust.hercules.app). |
| ISO 27001 | Certification in progress. |
| HIPAA | Compliance review in progress. Expected by February 2027. |

### Where can I see Hercules's full compliance reports?

Visit our [Trust Center](https://trust.hercules.app) and email [sales@hercules.app](mailto:sales@hercules.app) to request additional documents.

### When is Hercules SOC 2 Type 2 coming?

We are currently in the monitoring period and expect the audit to be finalized by February 2027. SOC 2 Type 1 assesses the design of controls at a point in time. Type 2 also tests whether those controls operate effectively over a period of time.

### Can Hercules complete additional security audits or questionnaires?

Yes. We are happy to discuss additional audits and complete security questionnaires for enterprise customers. Send your requirements to [sales@hercules.app](mailto:sales@hercules.app) so we can agree on scope and timing.

### Is Hercules compliant with privacy frameworks in other countries?

Hercules self-attests to compliance with these privacy frameworks:

| Country | Framework |
| - | - |
| Australia | Privacy Act and Australian Privacy Principles (APPs) |
| South Africa | Protection of Personal Information Act (POPIA) |
| Canada | Personal Information Protection and Electronic Documents Act (PIPEDA) |
| South Korea | Personal Information Protection Act (PIPA) |
| India | Digital Personal Data Protection Act (DPDP Act) |

These are Hercules self-attestations, not independent certifications. Email [sales@hercules.app](mailto:sales@hercules.app) to discuss your regional requirements, request supporting information, or arrange additional audits.

### Additional FAQ

<AccordionGroup>
  <Accordion title="Do the apps I build on Hercules also inherit this compliance?">
    These audits and attestations cover the Hercules platform. Your app needs its own assessment and
    any certifications required for its use case. Hercules can help you work toward these. We design
    our platform with the highest security and compliance standards in mind.
  </Accordion>

  <Accordion title="What if I need an additional certification?">
    Please reach out to [sales@hercules.app](mailto:sales@hercules.app). We may already meet your
    requirements and can confirm the applicable certification or compliance status.
  </Accordion>
</AccordionGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.