Are you SOC 2 / HIPAA / GDPR compliant?

Every core system Sabi runs on (Supabase, Stripe, DigitalOcean) holds its own SOC 2 attestation, and Sabi is built to the same principles: access control, encryption, audit logging, least privilege, incident response. We've completed an internal security gap assessment and are preparing for our own SOC 2 Type I audit — we'll publish the report when it's done.

We align with GDPR and CCPA expectations. We're not yet certified for HIPAA or ISO 27001 — if your business needs one of those, tell us; it helps us prioritize.