Trust & Safety

Context Trust & Safety Center

Security, compliance, and data-handling documentation for the Context platform. Deployment models, security controls, policies, subprocessors, and how to request the SOC 2 and ISO 27001 reports and other audit artifacts.

Documents

Policies and documentation

Public documents are linked directly. Gated documents are shared on request, under NDA where required.

Audit reports & assessments

  • SOC 2 report

    The current independent audit report for the Context platform.

  • ISO 27001 certificate

    Certification of the information security management system.

  • Penetration-testing report (latest)

    The most recent third-party penetration test of the platform.

  • CAIQ security questionnaire

    Pre-completed Consensus Assessments Initiative Questionnaire for self-serve review.

  • Security policies (combined)

    The policies of the written information security program, combined in one document.

  • Security & compliance program update

    Point-in-time summary of the compliance program and what changed.

Security architecture

  • Security architecture whitepaper

    The full architecture behind the public principles: the control-plane/sandbox split, tenant isolation, and the authorization model in depth.

  • Software Bill of Materials (SBOM), latest release

    Per-release SBOM with signed build provenance. On the security roadmap; requestable when the supply-chain work ships, and matters most for self-hosted installs.

  • Hardened base-image inventory

    The minimal, pinned, regularly rebuilt base images shipped identically to managed and self-hosted. On the security roadmap; requestable once published.

Procurement & operations

  • W-9

    Taxpayer identification form for vendor onboarding.

  • Evidence of insurance

    Current certificate of insurance for procurement review.

Public policies

  • Data Processing Addendum

    How customer personal data is processed, protected, and transferred.

    View
  • Subprocessor list

    The vendor list referenced by the DPA, with purpose and location.

    View
  • Privacy Policy

    What we collect, why, and the rights you can exercise.

    View
  • Terms of Service

    The agreement that governs use of the Context platform.

    View
  • Acceptable Use Policy

    What the platform may and may not be used for.

    View
  • Security & deployment FAQ

    Deployment modes, credential brokering, training boundaries, and the audit story.

    View

Request access

Tell us who you are and what your review needs.

Resources