Certifications
Status of every certification we maintain or are pursuing.
SOC 2 Type II
Type I report Q3 2026; Type II observation period commenced. Auditor: Big-4 firm engagement letter signed. Scope covers all production systems.
ISO/IEC 27001:2022
Stage 1 documentation audit Q4 2026; Stage 2 certification Q1 2027. Certification body: ANAB-accredited registrar.
ISO/IEC 42001:2023 (AIMS)
World's first AI Management System standard. Internal AIMS active since 2026-04. External audit scheduled Q1 2027.
GDPR
Art. 32 controls implemented. DPO designated: dpo@regunav.com. EU representative appointed for non-EU customers.
EU AI Act
Self-assessed as not-high-risk under Annex III. Article 50 transparency obligations live. Article 4 AI literacy training mandatory for all staff.
HIPAA Security & Privacy Rules
Business Associate Agreement available on Enterprise. Administrative, physical, and technical safeguards implemented.
PCI DSS 4.0.1
We do not store cardholder data; payment processing is fully delegated to Stripe. SAQ-A scope confirmed.
NIST AI RMF 1.0
Govern · Map · Measure · Manage profile published. Annual re-baseline.
Need a certificate, attestation letter, or auditor questionnaire? trust@regunav.com