Hex

VantaVerified Jun 2026

Hex Compliance & Certifications

SOC 2 Type IISOC 3ISO 27001ISO 27701HIPAAFedRAMPGDPRCCPA

Frequently Asked Questions

Does Hex have SOC 2 Type II?

Yes. Hex holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27701, HIPAA, FedRAMP, GDPR, CCPA certifications. You can view their trust center at trust.hex.tech for full security and compliance documentation.

Where can I find Hex's security documentation?

Hex publishes their trust center on Vanta at trust.hex.tech. It includes security policies, compliance certifications (SOC 2 Type II, SOC 3, ISO 27001, ISO 27701, HIPAA, FedRAMP, GDPR, CCPA), and other documentation.

Does Hex have ISO 27001 certification?

Yes, Hex is ISO 27001 certified. This international standard confirms they have implemented a comprehensive information security management system (ISMS).

Is Hex HIPAA compliant?

Yes, Hex is HIPAA compliant and can support healthcare organizations that handle protected health information (PHI).