# WRITER Trust Center

WRITER is the end-to-end platform for scaling agentic AI in the enterprise. With WRITER, teams can build, activate, and supervise AI agents that are grounded in their company’s data and powered by WRITER's enterprise-grade LLMs.

## Compliance

- ISO 27001
- ISO 27701
- ISO 42001
- SOC 2 Type II
- HIPAA Type II
- PCI DSS - SAQ A

## Resources

### Compliance

- [2026 WRITER SOC 2 Type II + HIPAA Report](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=69e925be17f3bfe102c9332e)
- [WRITER ISO/IEC 27001:2022 Certificate - 2026](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=69d9499cb2bba09e7e3e3b7f)
- [WRITER ISO/IEC 27701:2019 Certificate - 2026](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=69d9499cd44b3671269ec38a)
- [WRITER ISO/IEC 42001:2023 Certificate - 2026](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=69d9499c9a94127fb8acd0ed)

### Assessments

- [Attestation of Penetration Testing](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=69cfe808ab79d9ee943d8666)
- 2026 Palmyra X5 Technical Report
- [2025 WRITER Palmyra X5 Bias Benchmarking Report](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=6980fd46af7ddac72c26041a)

### Other resources

- [Developer Portal](https://dev.writer.com/)
- [Legal Hub](/content/legal/index.html)
- [Help Center](https://support.writer.com/)
- [WRITER Security and Architecture Whitepaper](https://trustcenter.writer.com/?requestAccessOpen=true&requestedResources=6a2c40dd4a2d438eb00aad3d)

## Controls

Updated 10 minutes ago

### Infrastructure security
- Unique network system authentication enforced
- Network segmentation implemented

### Organizational security
- Asset disposal procedures utilized
- Code of Conduct acknowledged by employees and enforced
- Performance evaluations conducted

### Product security
- Control self-assessments conducted
- Penetration testing performed
- Vulnerability and system monitoring procedures established

### Internal security procedures
- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Development lifecycle established

### Data and privacy
- Data retention procedures established
- Customer data deleted upon request
- Data classification policy established

## Subprocessors

WRITER Subprocessors & Affiliates

Deliver the WRITER platform

WRITER and its affiliates engage third-party subprocessors to help us provide services to our customers. A subprocessor is a third-party processor that receives data from WRITER and processes personal data on behalf of our customers. A list of WRITER’s subprocessors is available at [http://writer.com/legal/subprocessors/](/content/legal/subprocessors/index.html)

## Media

Introducing your AI HQ. Your home for building, activating, and supervising AI agents in the enterprise.

This resource is the official SOC 2 Type 2 report for WRITER, Inc., which includes an independent service auditor's examination conducted by A-LIGN ASSURANCE. The report evaluates the suitability of the design and operating effectiveness of controls for the WRITER Platform Services System relevant to Security, Availability, and Confidentiality trust services criteria. Additionally, the examination validates that WRITER's controls meet essential elements of the HIPAA/HITECH Security Rule. The audit covered the period from February 1, 2025, to January 31, 2026. Issued: March 11, 2026.

This resource is the official Certificate of Registration for WRITER, Inc., confirming that their Information Security Management System (ISMS) has been certified by A-LIGN Compliance and Security, Inc.. The certification validates that WRITER's management system conforms to the requirements of the ISO/IEC 27001:2022 standard. Issued: March 18, 2026.

This resource is the official Certificate of Registration for WRITER, Inc., verifying that their Information Security Management System (ISMS)—which extends to include privacy information management—conforms to the requirements of ISO/IEC 27701:2019. This certification is managed through the WRITER Integrated Management System (WIMS), which provides a unified framework for security, privacy, and AI governance. Issued: March 18, 2026.

WRITER underwent a comprehensive penetration test of its Hybrid AI & Web Application between December 9 and December 31, 2025. This assessment was performed by Arcanum Information Security. The engagement utilized a primary methodology of manual ethical hacking supplemented by automated scanning to ensure deep and broad coverage of the environment.