# Personal assistants: SOC 2, ISO 27001, GDPR and SSO

We checked 10 personal assistants against their makers' own pages. 4 hold SOC 2, 1 hold ISO 27001, 6 state GDPR or offer a DPA and 1 offer SSO with no plan limit.

| Product | SOC 2 | ISO 27001 | GDPR / DPA | SSO | Checked |
| --- | --- | --- | --- | --- | --- |
| [AGI, Inc.](https://agentsindex.ai/multion) | Not stated | Not stated | Yes | Yes | 2026-10-27 |
| [ChatGPT](https://agentsindex.ai/chatgpt) | Not stated | Not stated | Yes | Partly (ChatGPT Enterprise plan and up) | 2026-10-23 |
| [Claude](https://agentsindex.ai/claude) | Yes | Yes | Not stated | Partly (Team and Enterprise plan and up) | 2026-10-22 |
| [Google Gemini](https://agentsindex.ai/google-gemini) | Not stated | Not stated | Not stated | Not stated | 2026-10-31 |
| [Lindy](https://agentsindex.ai/lindy-ai) | Yes | Not stated | Yes | Partly (Enterprise plan and up) | 2026-09-19 |
| [Microsoft Copilot](https://agentsindex.ai/microsoft-copilot) | Not stated | Not stated | Yes | Not stated | 2026-10-31 |
| [Motion](https://agentsindex.ai/motion) | Yes | Not stated | Not stated | Not stated | 2026-10-23 |
| [Reclaim](https://agentsindex.ai/reclaim-ai) | Not stated | Not stated | Yes | Partly (Enterprise plan and up) | 2026-10-30 |
| [Speechify](https://agentsindex.ai/speechify) | Yes | Not stated | Not stated | Not stated | 2026-10-29 |
| [superbot](https://agentsindex.ai/superbot) | Not stated | Not stated | Yes | Not stated | 2026-11-01 |

"Checked" is the oldest answer in the row. "Not stated" means the maker's pages don't say either way.

- **SOC 2**: Holds a SOC 2 report, Type I or Type II.
- **ISO 27001**: Is certified to ISO/IEC 27001.
- **GDPR / DPA**: States GDPR compliance or offers a data processing agreement.
- **SSO**: Lets a team sign in through its own identity provider (SAML or OIDC), with the plan it comes on.

## The "Partly" answers

- **ChatGPT, SSO**: ChatGPT Enterprise supports SAML single sign-on and related user-management controls, rather than exposing SSO on the individual entry plan. ([source](https://openai.com/enterprise-privacy/), 2026-10-23)
- **Claude, SSO**: Single sign-on is a Team and Enterprise feature; the individual plan comparison marks SSO and domain capture as absent on Free, Pro and both Max tiers. ([source](https://claude.com/pricing), 2026-10-22)
- **Lindy, SSO**: Single sign-on with SCIM provisioning is an Enterprise-only line, marked absent on Plus, Pro and Max in the comparison table. Lindy never names the protocol, so SAML versus OIDC is unstated. ([source](https://www.lindy.ai/enterprise), 2026-09-19)
- **Reclaim, SSO**: Single sign on and SCIM user provisioning are listed only on the Enterprise plan, not the self serve Starter or Business cards. ([source](https://reclaim.ai/pricing), 2026-10-30)

How we check listings: [methodology](https://agentsindex.ai/methodology/).

Source: AgentsIndex, https://agentsindex.ai/data/personal-assistants-security/