{"statement_id":"st_d868760bdf248863feba","subject":{"kind":"product","slug":"vendr","name":"Vendr","url":"https://sourcetier.com/products/vendr"},"attribute":{"key":"iso27001","label":"ISO/IEC 27001","unit":null,"core":true},"scope":null,"region":null,"first_recorded_at":"2026-09-02T00:14:49.892Z","current":{"claim_id":"c366d7bb-b5dd-4afc-afbf-a97ce01905c6","value":true,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-02","recorded_at":"2026-09-02T00:15:10.958Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!(?:align|commit|working towards|pursu|accordance|based on|in line with|framework)[^.?!]{0,60})ISO[\\s/]*(IEC[\\s/]*)?27001(?![^.?!]{0,60}(?:in progress|underway|pursu|working towards|planned|road ?map|commitment|aligned|alignment|framework))","reader":"text pattern","parser_version":null,"method":null,"excerpt":".... AWS data centers are highly secure, are SOC 1 and SOC 2 compliant, in addition to being ISO 27001, SSAE 16/ISAE 3402, PCI Level 1, FISMA Moderate, and Sarbanes-Oxley compliant. Their SOC...","sources":[{"url":"https://www.vendr.com/legal/security","tier":1,"type":"security_documentation","retrieved_on":"2026-09-02","role":"evidence"},{"url":"https://www.vendr.com/legal/security","tier":1,"type":"security_documentation","retrieved_on":"2026-10-02","role":"evidence"}]},"version_count":2,"versions":[{"claim_id":"7b46d665-4749-4006-9c44-f46f6259d319","value":null,"unit":null,"verification_state":"unknown","confidence_recorded":0,"observed_on":"2026-09-02","recorded_at":"2026-09-02T00:14:49.892Z","ended_at":"2026-09-02T00:15:10.958Z","ended_by":"superseded","superseded_by_claim_id":"c366d7bb-b5dd-4afc-afbf-a97ce01905c6","withdrawal_reason":null,"valid_from":null,"extraction":null,"reader":null,"parser_version":null,"method":null,"excerpt":null,"sources":[{"url":"https://www.vendr.com/","tier":1,"type":"official_documentation","retrieved_on":"2026-09-02","role":"checked_without_finding"}]},{"claim_id":"c366d7bb-b5dd-4afc-afbf-a97ce01905c6","value":true,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-02","recorded_at":"2026-09-02T00:15:10.958Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!(?:align|commit|working towards|pursu|accordance|based on|in line with|framework)[^.?!]{0,60})ISO[\\s/]*(IEC[\\s/]*)?27001(?![^.?!]{0,60}(?:in progress|underway|pursu|working towards|planned|road ?map|commitment|aligned|alignment|framework))","reader":"text pattern","parser_version":null,"method":null,"excerpt":".... AWS data centers are highly secure, are SOC 1 and SOC 2 compliant, in addition to being ISO 27001, SSAE 16/ISAE 3402, PCI Level 1, FISMA Moderate, and Sarbanes-Oxley compliant. Their SOC...","sources":[{"url":"https://www.vendr.com/legal/security","tier":1,"type":"security_documentation","retrieved_on":"2026-09-02","role":"evidence"},{"url":"https://www.vendr.com/legal/security","tier":1,"type":"security_documentation","retrieved_on":"2026-10-02","role":"evidence"}]}],"changes":[{"id":"709","type":"research_update","label":"Research update","material":false,"sentence":"Vendr: ISO/IEC 27001 is now recorded as not measured.","noticed_at":"2026-09-02T00:14:49.892Z","subject":{"kind":"product","slug":"vendr","name":"Vendr"},"before":null,"after":{"value":null,"verification_state":"unknown","confidence":0},"claim_id":"7b46d665-4749-4006-9c44-f46f6259d319","statement_id":"st_d868760bdf248863feba","corrected":null},{"id":"2066","type":"documented","label":"First documented","material":true,"sentence":"Vendr: ISO/IEC 27001 documented (verified). This is a finding of ours, not necessarily a new certification.","noticed_at":"2026-09-02T00:15:10.958Z","subject":{"kind":"product","slug":"vendr","name":"Vendr"},"before":{"value":null,"verification_state":"unknown","confidence":0},"after":{"value":true,"verification_state":"verified","confidence":90},"claim_id":"c366d7bb-b5dd-4afc-afbf-a97ce01905c6","statement_id":"st_d868760bdf248863feba","corrected":null}],"page_url":"https://sourcetier.com/statements/st_d868760bdf248863feba","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}