SOC 2 Type II LLM APIs
LLM providers with a current SOC 2 Type II report available under NDA.
Why this matters
The de-facto baseline for B2B procurement — a SOC 2 Type II report covers security, availability, and confidentiality controls audited over a 6–12 month observation window.
Matching providers
11 totalCompliance posture changes over time. The "last reviewed" date on each card is when a human last verified the corresponding flag against the provider's published security material. For a regulated workload, always confirm directly with the provider before sending production data.
Frequently asked questions
Which LLM providers offer soc 2 type ii llm apis?
11 providers in our catalog are flagged for SOC 2 Type II LLM APIs, including Amazon, Anthropic, Cohere, Google and Microsoft, and 6 more. The flags are based on the providers' own published documentation; verify with their legal/sales team before signing.
Why does SOC 2 Type II LLM APIs matter for LLM workloads?
The de-facto baseline for B2B procurement — a SOC 2 Type II report covers security, availability, and confidentiality controls audited over a 6–12 month observation window.
How do I verify a provider really has SOC 2 Type II LLM APIs?
Compliance flags on LLM Cloud Hub track whether providers publicly document the relevant attestation, BAA, or DPA — not whether *your* contract will include it. Always request a copy of the actual document from the provider before sending any regulated traffic. Pricing and compliance flags are refreshed nightly; the date of last review is shown on each provider page.