> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orq.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Trust center and compliance

> Orq.ai Trust Center: request the SOC 2 Type II report, ISO 27001 status, penetration test reports, HIPAA BAA, DPA, and sub-processor list.

The **Orq.ai** Trust Center at [trust.orq.ai](https://trust.orq.ai) is the source for security certifications and audit evidence. The artifacts sit behind an access request.

<Card title="Open the Orq.ai Trust Center" icon="shield-check" href="https://trust.orq.ai">
  Request access to reports, certifications, and compliance documentation.
</Card>

## What the Trust Center holds

| Artifact | Covers |
| - | - |
| SOC 2 Type II report | Independent audit of security controls |
| ISO 27001 status | Certification status and current reports |
| Penetration test reports | Independent testing of the platform |
| HIPAA BAA | Business Associate Agreement for processing protected health information |
| DPA | Data Processing Agreement under Article 28 GDPR |
| Sub-processor list | Third parties that process customer data |
| Control list | Security controls in place across the platform |

Access is requested from the Trust Center itself. For anything not listed there, contact [support@orq.ai](mailto:support@orq.ai).

See [Data Compliance](/ai-studio/organization/data-compliance) for data handling, masking, and retention.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.