OpenAI vs Harvey
Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.
| OpenAI openai.com | Harvey harvey.ai | |
|---|---|---|
| Verification | Listed | Report Verified |
| SOC 2 type | SOC 2 Type II | SOC 2 Type II |
| Auditor | — | Schellman |
| Last report | Jun 2025 | Jan 2026 |
| Renewal | Renewal overdue | Renews Jan 2027 |
| Region | United States | United States |
| Size | 201–1000 employees | 51–200 employees |
| Certifications | SOC 2 Type IISOC 3ISO 27001ISO 27017ISO 27018ISO 27701ISO 42001PCI DSSGDPRCCPAFedRAMPCSA STAR | SOC 2 Type IIISO 27001GDPRCCPA |
| Documents | — | — |
| Hosting | Microsoft Azure | Microsoft Azure, AWS |
| Subprocessors | — | — |
| Key controls | Not provided | 5/5 confirmed |