Today, Context.dev is officially SOC 2 Type 1 compliant.
We completed the audit with Comp AI and have entered the observation period for SOC 2 Type 2. The Type 1 report describes the security, availability, and confidentiality controls we have in place. Type 2 is the next phase — an auditor watches those same controls in operation over several months and reports on whether they actually hold up.
Why this matters
Customers send Context.dev a lot of sensitive signal: domains they care about, prospects they want enriched, internal queries they want answered with structured data, screenshots of their own pages, transactions from their bank feeds, and API keys that sit in production systems.
We owe customers more than a promise about that. SOC 2 Type 1 is an outside auditor signing off that the controls we already run — access management, encryption, change management, vendor review, incident response, logging, data handling — are documented, in place, and operating the way we say they do.
How we got here
We worked with Comp AI to scope the audit, gather evidence for our controls, and run the assessment. The result is a SOC 2 Type 1 report covering the Trust Services Criteria for Security, Availability, and Confidentiality.
We are now in the Type 2 observation window: the same controls, watched month over month against what we actually do in production rather than what we wrote down on day one.
How to request our SOC 2 report
You can request the SOC 2 Type 1 report, view our subprocessors, and see the current status of our controls on our trust portal:
Security, legal, and procurement teams reviewing Context.dev for a deal can pull everything they need from there in one place.
Build with us
If you want to extract structured data from the web — brand intelligence, company enrichment, AI website queries, product catalogs, screenshots, scraping, crawling, transaction context — and you want a vendor that treats your data with the rigor your own security team would, we want to work with you.
Sign up and try the API, or contact us if you would like to talk through a use case.
Type 2 is next. We will keep investing in security at the level customers should expect from an infrastructure they build on.