Matterport SOC 2 status and provider evidence

ability and Confidentiality. Audited by Frank, Rimerman + Co. LLP (independent CPA firm). Announced November 22, 2021. SOC 3 report available without NDA.”Verify on matterport.com●GDPR DPAHELD“Data Processing Addendum and Standard Contractual Clauses available for GDPR compliance. DPA references GDPR, CCPA, UK GDPR, and PIPEDA requirements.”Verify on matterport.com●CCPA DPAHELD“Data Processing Addendum explicitly addresses California Consum

01NOT CONFIRMEDNo public evidence of ISO 27001 certification found on Matterport domain despite multiple searches of trust center and security documentation.source: matterport.com○HIPAA / HIPAA BAANOT CONFIRMEDNo Business Associate Agreement or HIPAA compliance language found in Matterport's legal documents, terms of use, or trust center. No HIPAA BAA mentioned in Enterprise Addendum.source: matterport.com○PCI DSSNOT CONFIRMEDNo PCI DSS cert

ion Protection and Electronic Documents Act (PIPEDA) compliance.”Verify on matterport.com> Show 6 unconfirmed / not-held certifications○ISO 27001NOT CONFIRMEDNo public evidence of ISO 27001 certification found on Matterport domain despite multiple searches of trust center and security documentation.source: matterport.com○HIPAA / HIPAA BAANOT CONFIRMEDNo Business Associate Agreement or HIPAA compliance language found in Matterport's legal documen

e Agreement or HIPAA compliance language found in Matterport's legal documents, terms of use, or trust center. No HIPAA BAA mentioned in Enterprise Addendum.source: matterport.com○PCI DSSNOT CONFIRMEDNo PCI DSS certification found for Matterport. Parent company CoStar Group complies with PCI DSS Level 2, but this is CoStar's certification, not Matterport's.source: trust.costargroup.com○ISO 27017 / ISO 27018NOT CONFIRMEDNo public evidence o

held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.●SOC 2 Type IIHELD“Undergo independent third-party, annual audits against SOC2's Trust Principles of Security, Availability and Confidentiality. Audited by Frank, Rimerman + Co. LLP (independent CPA firm). Announced November 22, 2021. SOC 3 report available without

ual audits against SOC2's Trust Principles of Security, Availability and Confidentiality. Audited by Frank, Rimerman + Co. LLP (independent CPA firm). Announced November 22, 2021. SOC 3 report available without NDA.”Verify on matterport.com●GDPR DPAHELD“Data Processing Addendum and Standard Contractual Clauses available for GDPR compliance. DPA references GDPR, CCPA, UK GDPR, and PIPEDA requirements.”Verify on matterport.com●CCPA DPAHELD“Dat