Last verified: September 14, 2026
The short version: ClawMetry holds no certification and has had no independent audit or penetration test. We do not claim SOC 2, ISO or GDPR compliance. The sub-processor list is published. A data processing agreement (DPA) does not exist yet. No target dates are committed, so none are shown.
Each item is Completed, In progress or Not started. A date appears only when one is committed.
| Item | Status | What that means today |
|---|---|---|
| SOC 2 (Type I or Type II) | Not started | No auditor engaged and no report exists. |
| ISO/IEC 27001 | Not started | No certification and no certification audit scheduled. |
| ISO/IEC 42001 | Not started | No certification and no certification audit scheduled. |
| Independent penetration test | Not started | Not commissioned. No report or summary exists. |
| Data processing agreement (DPA) | Not started | No DPA has been drafted. See /dpa for how to raise one. |
| Sub-processor list | Completed | Published at /subprocessors, derived from the managed cloud's configuration. Not yet reviewed by counsel. |
| Vulnerability disclosure policy | Completed | Published in SECURITY.md. |
A published sub-processor list is not a GDPR compliance claim, and neither is hosting in the EU. Managed ClawMetry Cloud runs on Google Cloud in the europe-west1 region (Belgium). Local-only and customer-hosted deployments send no agent session data to ClawMetry; what they still send is listed on /trust.
Report a vulnerability to security@clawmetry.com or through a private GitHub security advisory. The targets in SECURITY.md are acknowledgement within 2 business days, an initial assessment within 5 business days, and a released fix for a confirmed critical or high issue within 30 days. They are targets from a small maintainer team, not a contractual SLA.
ClawMetry Cloud is operated by Instalabs LLC, registered at 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States, as stated in our Privacy Policy and Terms of Service.
If one of the missing items blocks your evaluation, tell us at security@clawmetry.com. That is how this list gets reordered.
← Enterprise