Trust Center
Mycroft is a cybersecurity and compliance automation platform helping B2B SaaS companies manage security, risk, and compliance. We are committed to maintaining the security, privacy, and reliability of our platform, and hold SOC 2 Type 2 compliance (security, confidentiality, availability, and processing integrity) alongside being GDPR and HIPAA compliant (subject to DPA and BAA respectively). We encourage customers and prospects to review our security documentation, policies, and reports below.
Compliance
Compliance frameworks Mycroft currently meets or is working toward to uphold their security and privacy commitments.
Trusted by
Willful
Wisedocs
Weave
Control D
Superwhisper
Cascade DebtResource library
Our security, compliance, and policy documentation, including audit reports.
Controls
Our security program is built on a complete set of controls that govern how we safeguard data and manage risk.
- Tooling resources
- AI system deployment
- AI system technical documentation
- Compliance Monitoring
- Asset Inventory
- Board of Directors/Advisors Established
- Application Authentication
- User Segregation
- Role-based Access
- Password Manager
- Onboarding Checklist
- Offboarding Checklist
- Password Standards
- Resource documentation
- Human resources
Subprocessors
Trusted third parties that support our services and may process customer data as part of their function.
Frequently asked questions
Updates
A live record of significant changes, vulnerability disclosures, and other notifications.
FedRAMP resources
Authorization data, documentation, and access records required for FedRAMP authorization and continuous monitoring, available to authorized federal parties.
FedRAMP 20x Certification Package Overview (FRC-CSO-PKG)
August 13, 2026
FedRAMP 20x Security Decision Record (SDR-CSO-FRR)
August 13, 2026
FedRAMP 20x Ongoing Certification Report (CCM-OCR-AVL)
August 13, 2026
FedRAMP 20x Certification Package Overview (Human Readable)
August 13, 2026
FedRAMP 20x Security Decision Record (Human Readable)
August 13, 2026
FedRAMP 20x Ongoing Certification Report (Human Readable)
August 13, 2026
SOC 2 Type 2
July 31, 2026