Brave Search API has achieved SOC 2 Type II attestation after a three-month external audit by Prescient Security. The certification validates Brave's security controls, data protection practices, and operational standards against industry benchmarks. The audit included network and web service penetration testing, with one low-severity issue identified and resolved. SOC 2 reports are available to customers under NDA through Brave's trust center, with annual audits planned to maintain compliance.
Table of contents
What is SOC 2?What is the process to get SOC 2 attestation?Why does SOC 2 matter for Brave Search API customers?How long did it take to earn the attestation, and how often will the Brave Search API be audited?What’s in the final SOC 2 report, and where can I view Brave’s SOC 2 audit?Sort: