Clear About What Has and Has Not Been Certified

No certification completed

The Forge has not currently completed a SOC 2, ISO 27001, HIPAA, PCI DSS, or other independent certification unless specifically listed below as completed. Do not treat any of these frameworks as satisfied until this table is updated.

• SOC 2 Type II

  SOC 2 readiness evaluation is planned. An independent examination has not been initiated.

  Not Started

• ISO 27001

  ISO 27001 certification has not been pursued. Evaluation may follow SOC 2.

  Not Started

• HIPAA

  The Forge does not currently process protected health information. HIPAA compliance is not applicable unless clinical data is handled.

  Not Started

• PCI DSS

  The Forge does not store or process payment card data. Payment processing is handled by third-party providers.

  Not Started