Is this your company? Buyers are checking deepset GmbH here. Claim deepset.ai free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
deepset GmbH
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
deepset GmbH is SOC 2 Type II compliant. deepset GmbH also holds ISO 27001, GDPR, and HIPAA.
About
Build, Test, and Deploy Generative AI in Your Mission-Critical Business.
Compliance & infrastructure
Hosting
AWS
Subprocessors
6- AAmazon Web Services · aws
- GGoogle Workspace · gsuiteadmin
- HHubSpot · Marketing
- SSalesforce · Sales
- AAuth0 · auth0
- SSegment · segment
Compliance leadership
The person who leads deepset GmbH's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. deepset GmbH's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
ISO 9001 certifiedApr 2026
We are proud to announce that we have successfully completed our ISO 9001 audit. ISO 9001 is an internationally recognised standard for quality management, and earning it requires demonstrating that our processes are consistent, well-documented, and continuously improving. This covers everything from how we design and deliver our product to how we handle customer support and internal operations.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is deepset GmbH SOC 2 compliant?
deepset GmbH is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is deepset GmbH ISO 27001 certified?
According to deepset GmbH's public trust center, deepset GmbH is ISO 27001 certified. On SOC2C this listing is Listed.
Is deepset GmbH GDPR compliant?
According to deepset GmbH's public trust center, deepset GmbH is GDPR compliant. On SOC2C this listing is Listed.
Is deepset GmbH HIPAA compliant?
According to deepset GmbH's public trust center, deepset GmbH is HIPAA compliant. On SOC2C this listing is Listed.
Is deepset GmbH SOC 2 Type I or Type II?
deepset GmbH is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use deepset GmbH's SOC 2 for a vendor risk assessment?
Yes. deepset GmbH's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is deepset GmbH penetration tested?
deepset GmbH hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is deepset GmbH secure?
Security isn't a single yes/no, but deepset GmbH is SOC 2 Type II compliant and holds ISO 27001, SOC 2 Type II, GDPR, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does deepset GmbH have a bug bounty or vulnerability disclosure program?
deepset GmbH hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@deepset.ai or via a /security page (deepset GmbH lists a security contact).
Who are deepset GmbH's subprocessors?
deepset GmbH lists 6 subprocessors on its trust center, including Amazon Web Services, Google Workspace, HubSpot, Salesforce, Auth0. Buyers use this for fourth-party risk review.
Where does deepset GmbH host or store data?
deepset GmbH hosts on AWS. Data residency details are on its trust center.
Where is deepset GmbH's trust center or security page?
deepset GmbH's trust center is at https://trust.deepset.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by deepset GmbH
Reproduced from deepset GmbH's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Where can I find out more about the deepset AI platform
Try our website or the deepset Cloud documentation page.
Which cloud and regions are supported?
The platform is hosted in AWS and particularly in eu-central-1 (Frankfurt) region.
Where is the data stored?
Customers using https://cloud.deepset.ai/ - All data is processed and stored within the EU.
Does the deepset AI platform support Single Sign-On (SSO)?
Yes deepset Cloud supports SSO.
Is the platform single-tenant, multi-tenant or hybrid?
The platform is architected as multi-tenant.
Is the data encrypted at rest, and in transit?
Yes. Data is encrypted at all times.
Can all data, configurations, and embeddings be exported?
Yes, it is possible.
What is the data retention and deletion policy upon contract termination?
Once the off boarding process is initiated after contract termination, the data are deleted after 30 days.
How do you manage compliance with AI-specific regulations (e.g., EU AI Act readiness)?
We actively monitor emerging and established AI regulations, including the EU AI Act, and align our practices with applicable requirements. Our approach includes implementing robust governance, transparency measures, and risk management processes to ensure responsible AI development and use. We also integrate compliance considerations into our product development lifecycle and maintain documentation to support regulatory readiness. As regulations evolve, we adapt our internal policies and controls accordingly.
What insurance coverage does deepset have in place for cyber incidents and business liability?
We’re covered by a cyber insurance with HDI, which provides up to €2 million in coverage for both self-related and third-party damages caused by cyber incidents. It also includes coverage for potential service interruptions due to technical issues or cloud outages. Additionally, we have business liability insurance through Hiscox, which provides €5 million in total coverage, including €1 million for business interruption.
Where can I find information about the deepset AI platform uptime and downtimes?
Please see https://status.deepset.ai/. We encourage customers to subscribe for real time notifications when we detect stability issues.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public