Is this your company? Buyers are checking Cartesia here. Claim cartesia.ai free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim freeCartesia
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Cartesia is SOC 2 Type II compliant. Cartesia also holds PCI DSS, HIPAA, and GDPR.
Compliance & infrastructure
Hosting
AWSGCP
Documents
6Documents
- PCI-DSS-v4-0-1-Attestation_Of_Compliance (AOC)-Cartesia AI Inc (1).pdfRequest
- Cartesia AI Vulnerability Assessment and Penetration Test Report.pdfRequest
- Cartesia AI Inc. HIPAA.pdfRequest
- 2025-2026 CyberSecurity Insurance Policy.pdfRequest
- Cartesia AI_Inc_PCI_v4.0.1_2025_Certificate_of_Compliance.pdfRequest
- PCI-DSS-v4-0-1-Attestation_Of_Compliance (AOC)-Cartesia AI Inc.pdfRequest
Subprocessors
13- AAmazon Web Services · Cloud providerSeattle, WA, USA
- TTogether.ai · AI infrastructure and model deploymentSan Francisco, CA, USA
- SStripe · paymentsSan Francisco, California
- DDatadog · Cloud monitoringNew York, NY, USA
- CClerk · User authentication and identity managementNew York City, New York, USA
- VVercel · Web application hosting and deploymentSan Francisco, CA, USA
- TTwilio · Engineering
- CCloudflare · content delivery network (CDN) and securityGlobal (data centers worldwide); Headquarters in San Francisco, California USA
- FFivetran · Data pipeline and ETL servicesOakland, CA, USA
- GGoogle Cloud · Cloud infrastructure and hostingHeadquartered in Mountain View, California, USA
- HHightouch · Reverse ETL and data syncingCustomer data synchronization platform
- RRender · Cloud provider
Show all 13 subprocessorsShow fewer
- PPylon
Compliance leadership
The person who leads Cartesia's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Cartesia's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Subscribe to notificationsApr 2025
Sending this notification that you can now subscribe to updates in our trust center
This listing is partial
5/11 details · 45%SOC2C shows the verified essentials. 6 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DescriptionAdd a one-line description so buyers recognize you.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
- LogoAdd your logo for a recognizable listing.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Cartesia SOC 2 compliant?
Cartesia is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Cartesia PCI DSS compliant?
According to Cartesia's public trust center, Cartesia is PCI DSS compliant. On SOC2C this listing is Listed.
Is Cartesia HIPAA compliant?
According to Cartesia's public trust center, Cartesia is HIPAA compliant. On SOC2C this listing is Listed.
Is Cartesia GDPR compliant?
According to Cartesia's public trust center, Cartesia is GDPR compliant. On SOC2C this listing is Listed.
Is Cartesia SOC 2 Type I or Type II?
Cartesia is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Cartesia's SOC 2 for a vendor risk assessment?
Yes. Cartesia's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Cartesia penetration tested?
Cartesia hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Cartesia secure?
Security isn't a single yes/no, but Cartesia is SOC 2 Type II compliant and holds PCI DSS, HIPAA, SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Cartesia have a bug bounty or vulnerability disclosure program?
Cartesia hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@cartesia.ai or via a /security page (Cartesia lists a security contact).
Who are Cartesia's subprocessors?
Cartesia lists 13 subprocessors on its trust center, including Amazon Web Services, Together.ai, Stripe, Datadog, Clerk. Buyers use this for fourth-party risk review.
Where does Cartesia host or store data?
Cartesia hosts on AWS, GCP. Data residency details are on its trust center.
Where is Cartesia's trust center or security page?
Cartesia's trust center is at https://trust.cartesia.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.