improvement(comparisons): remove obsolete SOC 2 facts

Author: j15z

apps/sim/lib/compare/data/competitors/claude-cowork.ts

@@ -749,20 +749,6 @@ export const claudeCoworkProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value: 'Yes (company-wide, not Cowork-specific)',
-        detail:
-          'Anthropic holds SOC 2 Type I and Type II; the detailed report is available under NDA via the Anthropic Trust Portal. There is no Cowork-specific SOC 2 scoping statement.',
-        shortValue: 'Company-wide, not Cowork-specific',
-        confidence: 'estimated',
-        sources: [
-          {
-            url: 'https://trust.anthropic.com/',
-            label: 'Anthropic Trust Center',
-            asOf: '2026-07-02',
-          },
-        ],
-      },
       dataResidency: {
         value:
           'No Cowork-specific residency controls; company-wide default is multi-region processing, US-based storage',
@@ -810,7 +796,8 @@ export const claudeCoworkProfile: CompetitorProfile = {
       compliance: {
         value:
           'SOC 2 Type I and Type II (company-wide, not Cowork-specific), ISO 27001:2022, ISO/IEC 42001:2023, HIPAA-ready (BAA via sales-assisted Enterprise)',
-        detail: 'Company-wide Anthropic certifications, not Cowork-scoped.',
+        detail:
+          'Company-wide Anthropic certifications, not Cowork-scoped. The detailed SOC 2 report is available under NDA via the Anthropic Trust Portal.',
         shortValue: 'SOC 2 Type I/II, ISO 27001, ISO 42001, HIPAA-ready',
         confidence: 'estimated',
         sources: [

apps/sim/lib/compare/data/competitors/crewai.ts

@@ -786,21 +786,6 @@ export const crewaiProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          'Yes: CrewAI AMP has a SOC 2 Type 1 audit report (dated November 2025), available via its Trust Center',
-        detail:
-          "CrewAI's Trust Center (trust.crewai.com, indexed by Vanta) lists a SOC 2 Type 1 Audit Report from November 2025. This applies to the Enterprise/AMP offering, not to a self-hosted deployment of the open-source framework, which has no compliance certification of its own since it isn't a hosted service.",
-        shortValue: 'SOC 2 Type 1 report (Nov 2025) for the AMP platform',
-        confidence: 'estimated',
-        sources: [
-          {
-            url: 'https://trust.crewai.com/',
-            label: 'CrewAI Trust Center',
-            asOf: '2026-07-02',
-          },
-        ],
-      },
       dataResidency: {
         value:
           'Yes: achievable via self-hosting the OSS framework or AMP Factory (on-prem/private VPC)',

apps/sim/lib/compare/data/competitors/dust.ts

@@ -781,25 +781,6 @@ export const dustProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value: 'Yes: SOC 2 Type II certified, achieved audit readiness with Vanta in three weeks',
-        detail:
-          "Dust's own security page states SOC 2 Type II certification; a Vanta customer case study describes Dust achieving SOC 2 Type II audit readiness in three weeks using Vanta's automation, reducing compliance workload by roughly 50%. The report is downloadable via Dust's Trust Center.",
-        shortValue: 'SOC 2 Type II certified, report via Trust Center',
-        confidence: 'verified',
-        sources: [
-          {
-            url: 'https://www.vanta.com/customers/dust',
-            label: 'With Vanta, Dust achieved SOC 2 Type II audit readiness in three weeks',
-            asOf: '2026-07-02',
-          },
-          {
-            url: 'https://trust.dust.com/',
-            label: 'Dust Trust Center',
-            asOf: '2026-07-02',
-          },
-        ],
-      },
       dataResidency: {
         value: 'Yes: selectable US or EU data-hosting region',
         detail:
@@ -856,6 +837,16 @@ export const dustProfile: CompetitorProfile = {
             label: 'Dust Security',
             asOf: '2026-07-02',
           },
+          {
+            url: 'https://www.vanta.com/customers/dust',
+            label: 'With Vanta, Dust achieved SOC 2 Type II audit readiness in three weeks',
+            asOf: '2026-07-02',
+          },
+          {
+            url: 'https://trust.dust.com/',
+            label: 'Dust Trust Center',
+            asOf: '2026-07-02',
+          },
         ],
       },
       modelAndToolGovernance: {

apps/sim/lib/compare/data/competitors/flowise.ts

@@ -671,15 +671,6 @@ export const flowiseProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          'Unknown: a third-party security-scan aggregator (Nudge Security) lists Flowise as SOC 2 compliant among several other certifications, but Flowise has published no SOC 2 report, badge, or trust page of its own.',
-        detail:
-          'The same third-party source also claims FedRAMP and PCI compliance for a small startup, an atypical combination not corroborated on flowiseai.com.',
-        shortValue: 'No official confirmation found',
-        confidence: 'unknown',
-        sources: [],
-      },
       dataResidency: {
         value:
           'Yes, indirectly: self-hosting (including on-prem/air-gapped Enterprise deployment) lets an organization fully control data location. There is no dedicated regional-cloud-hosting option for the managed Cloud product.',

apps/sim/lib/compare/data/competitors/gumloop.ts

@@ -792,20 +792,6 @@ export const gumloopProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          'SOC 2 Type II attested; also HIPAA-compliant with BAAs available on eligible plans, and GDPR-aligned with EU-U.S. Data Privacy Framework (incl. UK Extension) certification',
-        shortValue: 'SOC 2 Type II, HIPAA, GDPR-aligned',
-        confidence: 'verified',
-        sources: [
-          {
-            url: 'https://www.gumloop.com/solutions/security',
-            label: 'Gumloop Security & Trust',
-            asOf: '2026-07-02',
-          },
-          { url: 'https://trust.gumloop.com/', label: 'Gumloop Trust Center', asOf: '2026-07-02' },
-        ],
-      },
       dataResidency: {
         value:
           'Enterprise VPC deployment into a customer-controlled cloud region provides data residency/control; zero data retention (ZDR) agreements are in place with major LLM providers',
@@ -867,6 +853,7 @@ export const gumloopProfile: CompetitorProfile = {
             label: 'Gumloop: Security and trust',
             asOf: '2026-07-02',
           },
+          { url: 'https://trust.gumloop.com/', label: 'Gumloop Trust Center', asOf: '2026-07-02' },
         ],
       },
       modelAndToolGovernance: {

apps/sim/lib/compare/data/competitors/langchain.ts

@@ -781,21 +781,6 @@ export const langchainProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          "Yes: LangSmith is SOC 2 Type II certified. LangGraph Platform (now branded LangSmith Deployment) is publicly announced as carrying the same attestation, sharing LangSmith's infrastructure and compliance posture.",
-        detail:
-          "LangChain's Trust Center (trust.langchain.com) is the canonical source but renders via client-side JavaScript, so it could not be directly verified by an automated fetch; the LangSmith-side certification is independently confirmed on a static docs page.",
-        shortValue: 'Yes, SOC 2 Type II for LangSmith; LangGraph Platform shares it',
-        confidence: 'verified',
-        sources: [
-          {
-            url: 'https://docs.langchain.com/langsmith/regions-faq',
-            label: 'Regions FAQ - Docs by LangChain (confirms SOC 2 Type 2)',
-            asOf: '2026-07-08',
-          },
-        ],
-      },
       dataResidency: {
         value:
           'Yes: LangSmith offers selectable regions at no extra cost — US (GCP US), EU (GCP EU), APAC (GCP APAC), and a separate AWS US region',

apps/sim/lib/compare/data/competitors/langflow.ts

@@ -689,15 +689,6 @@ export const langflowProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          "Unknown: no public documentation or official page states a SOC 2 certification for Langflow. The docs' Security page discusses infrastructure-level responsibility for operators, not a compliance certification.",
-        detail:
-          'Security docs place isolation and compliance burden on the deploying organization.',
-        shortValue: 'Unknown, no SOC2 certification documented',
-        confidence: 'unknown',
-        sources: [],
-      },
       dataResidency: {
         value:
           'Yes via self-hosting: Langflow can be fully self-hosted on Docker, Kubernetes, on-prem, or any cloud region, giving organizations full control over data residency. No dedicated managed regional-hosting product is documented for Langflow Cloud.',

apps/sim/lib/compare/data/competitors/make.ts

@@ -849,20 +849,6 @@ export const makeProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value: 'Yes: SOC 2 Type II and SOC 3 completed; ISO 27001 certified; GDPR compliant',
-        detail:
-          "Make's Security page lists completed SOC 2 Type II audit, a publicly available SOC 3 report, ISO 27001 certification for the platform, and GDPR compliance. HIPAA is not mentioned on this page.",
-        shortValue: 'SOC 2 Type II, SOC 3, ISO 27001, GDPR',
-        confidence: 'verified',
-        sources: [
-          {
-            url: 'https://www.make.com/en/security',
-            label: 'Make Security page',
-            asOf: '2026-07-02',
-          },
-        ],
-      },
       dataResidency: {
         value:
           'Yes: choice of US or EU data center at organization creation; Enterprise gets an isolated AWS environment',

apps/sim/lib/compare/data/competitors/microsoft-copilot.ts

@@ -904,27 +904,6 @@ export const microsoftCopilotProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          'Yes: Copilot Studio (listed by its former name, "Copilot Studios") is one of the Microsoft online services explicitly in scope of the Office 365 SOC 2 Type 2 attestation report, with audit reports available from the Microsoft Service Trust Portal',
-        detail:
-          'Copilot Studio\'s own admin-certification page confirms SOC compliance without naming the specific report type, but Microsoft\'s dedicated SOC 2 Type 2 compliance offering page lists "Copilot Studios" by name among the in-scope Office 365 services, resolving which SOC report type applies.',
-        shortValue: 'Yes, named in scope of the SOC 2 Type 2 attestation report',
-        confidence: 'verified',
-        sources: [
-          {
-            url: 'https://learn.microsoft.com/en-us/microsoft-copilot-studio/admin-certification',
-            label:
-              'Review ISO, SOC, and HIPAA compliance - Microsoft Copilot Studio | Microsoft Learn',
-            asOf: '2026-07-04',
-          },
-          {
-            url: 'https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc-2',
-            label: 'SOC 2 Type 2 - Microsoft Compliance | Microsoft Learn',
-            asOf: '2026-07-04',
-          },
-        ],
-      },
       dataResidency: {
         value:
           'Yes: organizations can create agents in a specific environment/region so agent data resides within that geography, with Microsoft replicating only within the same geographic area for durability',

apps/sim/lib/compare/data/competitors/n8n.ts

@@ -864,27 +864,6 @@ export const n8nProfile: CompetitorProfile = {
       },
     },
     security: {
-      soc2: {
-        value:
-          "SOC 2: program 'aligned to' SOC 2 with annual third-party audits; report available to enterprise customers via Trust Center",
-        detail:
-          'n8n operates a Trust Center (trust.n8n.io, powered by SafeBase) covering security, compliance, privacy, and reliability. Its security program is aligned to the SOC 2 framework, with continuous evaluation and annual independent audits, and the SOC 2 report is provided to enterprise customers on request rather than published openly.',
-        shortValue: 'Aligned to SOC 2, report on request',
-        confidence: 'verified',
-        sources: [
-          { url: 'https://trust.n8n.io/', label: 'n8n Trust Center', asOf: '2026-07-02' },
-          {
-            url: 'https://support.n8n.io/article/request-for-soc-2-report',
-            label: 'n8n Help Center: Request for SOC-2 report',
-            asOf: '2026-07-02',
-          },
-          {
-            url: 'https://n8n.io/legal/security/',
-            label: 'Security | n8n',
-            asOf: '2026-07-02',
-          },
-        ],
-      },
       dataResidency: {
         value:
           'Yes: achievable via self-hosting; specific cloud data-residency regions not confirmed',