Trust & data
How the vendor protects buyer material, where its data comes from, and where it can run.
- SOC 2
- Vendor-stated Type I
Source:hud.ai· Sep 29, 2026
Quote
**SOC 2 Type I Certified** — Company has completed a SOC 2 Type I examination, demonstrating the design effectiveness of its security controls. **SOC 2 Type II In Progress** — Company is currently in the audit observation period for SOC 2 Type II certification.
- Trust center
Source:hud.ai· Sep 29, 2026
- Other certifications
- CCPA
Source:hud.ai· Sep 29, 2026
- Deployment
- Vendor-hostedOn-prem
Sources:docs.hud.ai/v6/reference/runtime.mddocs.hud.ai/v6/experimental/compose.md· Oct 9, 2026
Quotes
- Vendor-hosted:
The whole rollout managed by HUD
- On-prem:
Declare a multi-service environment as a standard Compose project and run it unchanged locally, hosted, or on owned infrastructure.
- Vendor-hosted:
- Data sources
- Not confirmed
Sources checked:hud.ai/research/sheetbench-50vendor.hud.ai/codebasesvendor.hud.ai (2)hud.ai/blog/announcing-16m-series-a· Sep 29, 2026
- Exclusivity
- Both
Source:hud.ai· Sep 29, 2026
- Stated confidentiality practices
- HUD says it signs NDAs before vendors share materials, uses restricted-access private links, and applies least-privilege controls. It also lists encryption and customer-data deletion after termination; evaluation environments are isolated between runs.
Sources:vendor.hud.aitrust.hud.aidocs.hud.ai· Sep 29, 2026
What they sell
- Offerings
Sources:hud.ai (1)hud.ai/blog/announcing-16m-series-ahud.ai/blog/sheetbench-50· Sep 29, 2026
- Domains
Sources:docs.hud.aihud.ai/blog/announcing-16m-series-ahud.ai/blog/sheetbench-50· Sep 29, 2026
- Delivery formats
- Docker containersMCP toolsAPIDatasetsManaged service
- Public samples & benchmarks
- Named customers
- DoorDashSharpeUiPath
Source:hud.ai· Sep 29, 2026
Every change to these facts is kept in the public claims log. Record co_922eb7e82706.