Merge

SafeBaseVerified May 2026

Merge Compliance & Certifications

SOC 2 Type IIISO 27001HIPAAGDPRCCPA

Frequently Asked Questions

Does Merge have SOC 2 Type II?

Yes. Merge holds SOC 2 Type II, ISO 27001, HIPAA, GDPR, CCPA certifications. You can view their trust center at trust.merge.dev for full security and compliance documentation.

Where can I find Merge's security documentation?

Merge publishes their trust center on SafeBase at trust.merge.dev. It includes security policies, compliance certifications (SOC 2 Type II, ISO 27001, HIPAA, GDPR, CCPA), and other documentation.

Does Merge have ISO 27001 certification?

Yes, Merge is ISO 27001 certified. This international standard confirms they have implemented a comprehensive information security management system (ISMS).

Is Merge HIPAA compliant?

Yes, Merge is HIPAA compliant and can support healthcare organizations that handle protected health information (PHI).