Security and compliance
AI enterprise search: SOC 2, ISO 27001, GDPR and SSO
We checked 5 AI enterprise search against their makers' own pages. 2 hold SOC 2, 2 hold ISO 27001, 4 state GDPR or offer a DPA and 4 offer SSO with no plan limit.
| AI enterprise search | SOC 2 | ISO 27001 | GDPR / DPA | SSO |
|---|---|---|---|---|
| AlgoliaChecked | Not stated | Not stated | Yes | PartlyElevate plan and up |
| BloomfireChecked | Not checked | Not checked | Not checked | Yes |
| CoveoChecked | Not stated | Not stated | Yes | Yes |
| GleanChecked | Yes | Yes | Yes | Yes |
| MoveworksChecked | Yes | Yes | Yes | Yes |
"Checked" is the oldest answer in the row. "Not stated" means the maker's pages don't say either way.
- SOC 2
- Holds a SOC 2 report, Type I or Type II.
- ISO 27001
- Is certified to ISO/IEC 27001.
- GDPR / DPA
- States GDPR compliance or offers a data processing agreement.
- SSO
- Lets a team sign in through its own identity provider (SAML or OIDC), with the plan it comes on.
The "Partly" answers
- Algolia, SSO: Single sign-on is listed as a feature of the quoted top plan rather than of the self-serve tiers, bundled there with the stronger uptime commitment. Source,
Use the data
How we check listings: methodology.