Skip to content

RAG and retrieval tools that state SOC 2

The INITE Atlas lists 17. By use, the list opens with Pinecone, Parallel Web Systems, Cohere, Meilisearch and Zilliz.

The vendor states a SOC 2 report or attestation on its own trust or security page. Their statement, with the page and the date.

Where each one says so

ToolWhere it says so
Pinecone logoPineconeFrom $20/moSOC 2 Type IIpinecone.io/securityread Oct 7, 2026
Parallel Web Systems logoParallel Web SystemsFree plan · From $0.00 per useparallel.ai/privacy-policyread Oct 7, 2026
Cohere logoCohereFrom $2,000/moSOC 2 Type IIcohere.com/securityread Oct 7, 2026
Meilisearch logoMeilisearchFree plan · From $20/moSOC 2 Type IItrust.meilisearch.comread Oct 7, 2026
Zilliz logoZillizFree plan · From $197/moSOC 2 Type IIzilliz.com/trust-centerread Oct 7, 2026
Qdrant logoQdrantFree planSOC 2 Type IIqdrant.tech/securityread Oct 7, 2026
Weaviate logoWeaviateFree plan · From $45/moSOC 2 Type IIweaviate.io/securityread Oct 7, 2026
CustomGPT.ai logoCustomGPT.aiFree plan · From $89/moSOC 2 Type IIcustomgpt.ai/securityread Oct 7, 2026
Reducto logoReductoFrom $10 per useSOC 2 Type IIdocs.reducto.ai/security/policiesread Oct 7, 2026
Unstructured logoUnstructuredFree plan · From $0.02 per useSOC 2 Type IItrust.unstructured.ioread Oct 7, 2026
turbopuffer logoturbopufferFrom $16/moSOC 2 Type IIturbopuffer.com/docs/securityread Oct 7, 2026
XDAS logoXDASPrice not readSOC 2 Type Ixtract.io/security-accreditations-certificationsread Oct 8, 2026
Vectara logoVectaraFrom $100,000/yrSOC 2 Type IIvectara.com/legal/privacy-policyread Oct 7, 2026
Octen logoOctenFree plan · From $0.01 per useocten.ai/privacy-policyread Oct 8, 2026
Endee.io logoEndee.ioFree plan · From $99/moSOC 2 Type IIendee.io/resources/securityread Oct 8, 2026
Octopoda logoOctopodaFree plan · From $19/mooctopodas.com/securityread Oct 8, 2026
GTWY logoGTWYFree plan · From $29/moSOC 2 Type IIgtwy.ai/trustread Oct 10, 2026

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.

How we read every tool → · By INITE Atlas Desk