rowid,app_id,run,excerpt,reason 10,F1-001,a,Stay secure and compliant,compliance 22,F1-001,b,Detailed activity feeds and access lists make it easy to see who,compliance 23,F1-001,b,Stay secure and compliant,compliance 40,F1-002,a,Pick the credential and the model each agent runs on. Keys are stored encrypted.,compliance 66,F1-005,a,"Datacenter in Brazil, no international data transfer.",compliance 71,F1-005,a,The project maintainers are **neither** controllers nor processors of your instance,compliance 80,F1-005,b,RLS on every tenant-aware table with an isolation test as a CI gate,compliance 81,F1-005,b,append-only audit log with 5-year retention,compliance 86,F1-005,b,Distributed under the **MIT** license,compliance 105,F1-011,a,This work is licensed under a [Creative Commons Attribution 4.0 International License (CC BY 4.0)],compliance 168,F1-029,a,ISO9001、ISO14001、ISO45001、ISO27001和ISO20000,compliance 215,F1-043,a,Launch a GDPR Compliant hotel website and protect your customer’s personal data by integrating QloApps GDPR Compliance.,compliance 223,F1-043,b,Launch a GDPR Compliant hotel website and protect your customer’s personal data by integrating QloApps GDPR Compliance.,compliance 234,F1-046,a,"Audit-ready. Policy-based RBAC, immutable audit logs, electronic document sign-off workflows, and evidence chains.",compliance 235,F1-046,a,Probo organizes privacy work; it does not determine which law applies or replace legal advice.,compliance 240,F1-046,a,"They do not determine which law applies, classify every tracker automatically, or guarantee legal compliance.",compliance 243,F1-046,b,"**Audit-ready.** Policy-based RBAC, immutable audit logs, electronic document sign-off workflows, and evidence chains.",compliance 246,F1-046,b,Probo organizes privacy work; it does not determine which law applies or replace legal advice.,compliance 247,F1-046,b,"Geolocation, presentations (opt-in, opt-out, and notice), Global Privacy Control handling, version history, and consent records help teams implement a consent program.",compliance 263,F1-047,a,Impact: Negligible,compliance 276,F1-047,b,"Mayan EDMS welcomes responsible security research and clear, technically supported reports.",compliance 279,F2-001,a,"Asana uses physical, procedural, and technical safeguards to preserve the integrity and security of your information.",compliance 287,F2-001,a,HIPAA compliance,compliance 292,F2-001,b,"Asana uses physical, procedural, and technical safeguards to preserve the integrity and security of your information.",compliance 298,F2-001,b,Asana meets HIPAA compliance and supports Enterprise Key Management (EKM).,compliance 300,F2-001,b,Our AI partners do not use your data to train their models.,compliance 305,F2-007,a,Your data is never used to train AI models.,compliance 316,F2-007,b,Your data is never used to train AI models.,compliance 320,F2-007,b,Does Userback MCP expose data beyond existing permissions?,compliance 322,F2-015,a,"Each company’s data in Pipedrive is stored in a separate, encrypted database to prevent the risk of others accessing your data",compliance 348,F2-019,a,"Yes, Xero’s reporting and analytics capabilities help you prepare and submit your returns so you don’t miss a deadline.",compliance 355,F2-019,a,Enjoy the peace of mind of a compliance partner built into your ledger.,compliance 433,F2-043,a,Role-based access: Ensures compliance and risk mitigation by controlling who can access and use specific change models.,compliance 457,F2-055,a,MaintainX does not use your personal data to train its AI models.,compliance 471,F2-055,b,MaintainX does not use your personal data to train its AI models.,compliance 502,F2-067,a,Stripe verified partner badge,compliance 520,F2-067,b,"Givebutter partners with Stripe Payments Company for money transmission services and account services with funds held at Fifth Third Bank N. A., Member FDIC.",compliance