# Research agents: SOC 2, ISO 27001, GDPR and SSO

We checked 8 research agents against their makers' own pages. 2 hold SOC 2, 0 hold ISO 27001, 3 state GDPR or offer a DPA and 3 offer SSO with no plan limit.

| Product | SOC 2 | ISO 27001 | GDPR / DPA | SSO | Checked |
| --- | --- | --- | --- | --- | --- |
| [Arcmira](https://agentsindex.ai/arcmira) | Not checked | Not checked | Not checked | Yes | 2026-10-19 |
| [Base2026](https://agentsindex.ai/base2026) | Not stated | Not stated | Not stated | Partly | 2026-10-26 |
| [ChatGPT deep research](https://agentsindex.ai/chatgpt-deep-research) | Not stated | Not stated | Yes | Partly (ChatGPT Business and Enterprise plan and up) | 2026-10-24 |
| [FalcoScan](https://agentsindex.ai/falcoscan) | Not stated | Not stated | Yes | Yes | 2026-10-26 |
| [Perplexity](https://agentsindex.ai/perplexity) | Yes | Not stated | Not stated | Partly (Perplexity Enterprise plan and up) | 2026-10-23 |
| [Sixtyfour](https://agentsindex.ai/sixtyfour) | Yes | Not stated | Yes | Not stated | 2026-10-26 |
| [Undermind](https://agentsindex.ai/undermind) | Not stated | Not stated | Not stated | Partly (Enterprise plan and up) | 2026-10-19 |
| [What's Trending](https://agentsindex.ai/whatstrending) | Not stated | Not stated | Not stated | Yes | 2026-10-26 |

"Checked" is the oldest answer in the row. "Not stated" means the maker's pages don't say either way.

- **SOC 2**: Holds a SOC 2 report, Type I or Type II.
- **ISO 27001**: Is certified to ISO/IEC 27001.
- **GDPR / DPA**: States GDPR compliance or offers a data processing agreement.
- **SSO**: Lets a team sign in through its own identity provider (SAML or OIDC), with the plan it comes on.

## The "Partly" answers

- **Base2026, SSO**: The only sign-in offered is optional Google identity for the personal My Research area; the vendor states it currently accepts no authentication header, and no SAML or workspace IdP is described. ([source](https://base2026.dev/privacy), 2026-10-26)
- **ChatGPT deep research, SSO**: SAML SSO with MFA comes with Business seats and SCIM provisioning is Enterprise only; the individual plans that also include deep research have neither. ([source](https://chatgpt.com/pricing), 2026-10-24)
- **Perplexity, SSO**: SAML single sign-on with Okta and SCIM provisioning are Enterprise organization features, not available on consumer Pro or Max plans. ([source](https://www.perplexity.ai/help-center/en/articles/11199936-single-sign-on-sso-troubleshooting.md), 2026-10-23)
- **Undermind, SSO**: Single sign-on through an existing identity provider is an Enterprise item, described as sitewide organizational login, and is not part of Pro or Team. ([source](https://www.undermind.ai/mcp), 2026-10-19)

How we check listings: [methodology](https://agentsindex.ai/methodology/).

Source: AgentsIndex, https://agentsindex.ai/data/research-agents-security/