{"statement_id":"st_e85307318166eb5d1d2b","subject":{"kind":"product","slug":"gravitee-api-management","name":"Gravitee API Management","url":"https://sourcetier.com/products/gravitee-api-management"},"attribute":{"key":"hipaa","label":"HIPAA compliance stated","unit":null,"core":true},"scope":null,"region":null,"first_recorded_at":"2026-09-13T21:02:13.785Z","current":{"claim_id":"14b88c72-d752-4809-bfce-3e0524c6165e","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-09-13","recorded_at":"2026-09-13T21:02:54.306Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!\\b(?:meet|meets|meeting|support|supports|supporting|stay|stays|staying|remain|remains|remaining)\\b[^.?!]{0,20}\\b(?:compliance|compliant|requirements|regulations|standards|needs|obligations)\\b[^.?!]{0,60})\\bHIPAA\\b(?!\\s*\\)?\\s*(?:[-‐‑‒–]\\s?)?(?:ready\\b|readiness\\b|aligned\\b))(?![^.?!]{0,120}(?:are considered|in mind\\b))","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...request access to Gravitee security, compliance, and risk documentation. Compliance GDPR HIPAA ISO/IEC 27001 PCI DSS v4.0.0 SOC 2 Type 2 Gravitee Topco Limited is reviewed and trusted...","sources":[{"url":"https://trust.gravitee.io/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-13","role":"evidence"},{"url":"https://trust.gravitee.io/","tier":1,"type":"security_documentation","retrieved_on":"2026-10-16","role":"evidence"}]},"version_count":2,"versions":[{"claim_id":"421e6fbd-72d2-4315-a466-1ef6f7fbb08d","value":null,"unit":null,"verification_state":"unknown","confidence_recorded":0,"observed_on":"2026-09-13","recorded_at":"2026-09-13T21:02:13.785Z","ended_at":"2026-09-13T21:02:54.306Z","ended_by":"superseded","superseded_by_claim_id":"14b88c72-d752-4809-bfce-3e0524c6165e","withdrawal_reason":null,"valid_from":null,"extraction":"muster:kein-treffer","reader":"text patterns of this attribute; nothing on the page matched","parser_version":null,"method":null,"excerpt":null,"sources":[{"url":"https://www.gravitee.io/","tier":1,"type":"official_documentation","retrieved_on":"2026-09-13","role":"checked_without_finding"}]},{"claim_id":"14b88c72-d752-4809-bfce-3e0524c6165e","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-09-13","recorded_at":"2026-09-13T21:02:54.306Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!\\b(?:meet|meets|meeting|support|supports|supporting|stay|stays|staying|remain|remains|remaining)\\b[^.?!]{0,20}\\b(?:compliance|compliant|requirements|regulations|standards|needs|obligations)\\b[^.?!]{0,60})\\bHIPAA\\b(?!\\s*\\)?\\s*(?:[-‐‑‒–]\\s?)?(?:ready\\b|readiness\\b|aligned\\b))(?![^.?!]{0,120}(?:are considered|in mind\\b))","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...request access to Gravitee security, compliance, and risk documentation. Compliance GDPR HIPAA ISO/IEC 27001 PCI DSS v4.0.0 SOC 2 Type 2 Gravitee Topco Limited is reviewed and trusted...","sources":[{"url":"https://trust.gravitee.io/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-13","role":"evidence"},{"url":"https://trust.gravitee.io/","tier":1,"type":"security_documentation","retrieved_on":"2026-10-16","role":"evidence"}]}],"changes":[{"id":"95947","type":"research_update","label":"Research update","material":false,"sentence":"Gravitee API Management: HIPAA compliance stated is now recorded as not measured.","noticed_at":"2026-09-13T21:02:13.785Z","subject":{"kind":"product","slug":"gravitee-api-management","name":"Gravitee API Management"},"before":null,"after":{"value":null,"verification_state":"unknown","confidence":0},"claim_id":"421e6fbd-72d2-4315-a466-1ef6f7fbb08d","statement_id":"st_e85307318166eb5d1d2b","corrected":null},{"id":"98005","type":"documented","label":"First documented","material":true,"sentence":"Gravitee API Management: HIPAA compliance stated documented (verified). This is a finding of ours, not necessarily a new certification.","noticed_at":"2026-09-13T21:02:54.306Z","subject":{"kind":"product","slug":"gravitee-api-management","name":"Gravitee API Management"},"before":{"value":null,"verification_state":"unknown","confidence":0},"after":{"value":true,"verification_state":"verified","confidence":71},"claim_id":"14b88c72-d752-4809-bfce-3e0524c6165e","statement_id":"st_e85307318166eb5d1d2b","corrected":null}],"page_url":"https://sourcetier.com/statements/st_e85307318166eb5d1d2b","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}