Resources · Trust Center

Compliance, certifications, and data practices in one place.

OpenCentric is SOC 2 Type II certified, GDPR-ready, and HIPAA-aligned. Every certification, audit report, and policy document is listed here. Enterprise customers can request full reports under NDA.

Request SOC 2 report Security overview
Certifications & audits

Current compliance posture.

SOC 2 Type IICurrent
Jan 2025 – Dec 2025 · Schellman & Co.
Full report available under NDA.
Request
GDPRCompliant
Ongoing · Self-attested + DPA
DPA available on request.
Request
HIPAAAligned
Ongoing · Internal + BAA available
BAA available on request.
Request
PCI DSS SAQ-ACurrent
Annual · Stripe-managed
Card data never touches our servers.
Request
Penetration testQ1 2026
Annual · Coalfire
Executive summary under NDA.
Request
Policies

Legal documents.

Privacy policy
How we collect, use, and store your data.
Terms of service
The agreement governing your use of OpenCentric.
Data Processing Addendum
GDPR-compliant DPA for data processors.
Acceptable use policy
Permitted and prohibited uses of the platform.
Anti-circumvention
Policy on bypassing the platform for transactions.
Cookie policy
What cookies we use and how to manage them.