Trust & Compliance
Approved public registry entries for legal, security, sub-processor, and service-status information. Unpublished or unverified artifacts are not presented as available.
No counsel-approved public SLA is currently published. Numerical uptime, response-time, and service-credit commitments apply only when written into a signed customer agreement.
AICPA Trust Service Criteria
Internal readiness work maps controls to the Trust Service Criteria. NimbleSEO is not currently SOC 2 attested, and no Type II report is available on this page.
legal
0No additional public legal documents are listed in the trust registry right now.
security
1- Security Whitepaper
Architecture, encryption, access controls, incident response.
Request
compliance
0No public compliance documents are listed in the trust registry right now.
Request trust document access
Request a document that is actually listed below, or ask about the evidence roadmap in the review context. Listing a request option does not imply an unpublished certification or report exists.
No public questionnaire answers are listed in the registry right now. Contact compliance for a current procurement response.
Third parties currently recorded as processing customer data on our behalf. Contractual change-notice terms, if any, are governed by the published DPA or your signed agreement.
| Provider | Purpose | Data categories | Location | Links |
|---|---|---|---|---|
| OpenAI | Model inference and embeddings for AI-assisted content and search-visibility workflows. | prompt text, generated content, retrieved public-source excerpts, embedding inputs, request metadata | European Economic Area and United States contracting entities; processing may occur in multiple jurisdictions | |
| Anthropic, PBC | Model inference for AI-assisted content and search-visibility workflows. | prompt text, generated content, retrieved public-source excerpts, request metadata | United States and other processing locations described by the provider | |
| Supabase, Inc. | Managed PostgreSQL database, authentication, object storage, scheduled database jobs, and realtime services. | customer content and configuration, account and authentication identifiers, billing and entitlement records, application telemetry | Customer-selected project region, with support and sub-processor operations in other locations | |
| Stripe | Payment processing, subscriptions, invoices, tax calculation, card-based trial verification, and signed billing webhooks. | identity and contact details, billing address, payment and transaction details, tax identifiers, IP and device metadata |