Decagon

Verification notes: Re-checked this pass. Decagon now runs a Vanta-hosted Trust Center (trust.decagon.ai) alongside decagon.ai/legal/security, which describes network security, encryption (TLS 1.2+ in transit, AES-256 at rest), and access-control practices. Neither page names an external auditor or links a public SOC 2 report, so this remains a self-reported and Vanta-tracked compliance claim rather than an independently verified one — audited stays false. No MCP or A2A support confirmed. Re-checked this pass: Decagon's Vanta-hosted trust center lists SOC 2 Type II reports and an ISO 27001:2022 certificate dated January 22, 2026, but the underlying documents sit behind a Vanta access request and could not be independently re-confirmed on this pass -- treat the specific report-period dates as reported by secondary summaries, not directly verified. Neither the trust center nor Decagon's security page names the specific accredited CPA firm or ISO certification body performing these audits in the material reviewed, so this stays documentation-reviewed rather than independently-audited -- audited remains false pending a source that names the auditor directly, consistent with the bar this directory applied when it flipped Bedrock AgentCore's audited flag only once AWS's own page named the specific product as compliant.