Weaviate
Security Posture
Compliance-ready
As of July 20, 2026, Weaviate's security: SOC 2 Type II and HIPAA certifications, GDPR coverage, and 9 stated controls including RBAC, SSO, and SAML make this viable for regulated-industry buyers. Enterprise procurement teams will find the compliance checklist largely pre-filled; the gap is that governing law, arbitration terms, and auto-renewal clauses are not publicly stated.
High confidence · 12 dated facts
Corroborated across multiple dated, sourced facts.
Corroborated across multiple dated, sourced facts.
Certifications
SOC 2 Type IIHIPAA
Privacy
GDPR
Controls
RBACSSOSAMLPrivate LinkEncryption At RESTVPC PeeringEnd To End EncryptionEncryption In TransitMFA
Security Change Historydated events · values unlock with a key
Security signal added: MFA · high significance
Security signal added: GDPR · high significance
Security signal added: SOC 2 · high significance
Security signal added: Audit Logs · high significance
Security signal added: VPC Peering · high significance
Security signal added: Data Residency · high significance
Security signal added: Encryption In Transit · high significance
Security signal removed: Data Residency · high significance
Every security fact on this pagekey · value · provenance · dated · sourced
| Fact | Value | Provenance | As of | Source |
|---|---|---|---|---|
| security.cert.hipaa | HIPAA | company stated | 2026-07-20 | weaviate.io/pricing |
| security.cert.soc2-type-ii | SOC 2 Type II | company stated | 2026-07-20 | weaviate.io/pricing |
| security.encryption-at-rest | Encryption At REST | company stated | 2026-07-20 | weaviate.io/pricing |
| security.encryption-in-transit | Encryption In Transit | company stated | 2026-07-20 | weaviate.io/security |
| security.end-to-end-encryption | End To End Encryption | company stated | 2026-07-20 | weaviate.io/security |
| security.mfa | MFA | company stated | 2026-07-20 | weaviate.io/security |
| security.privacy.gdpr | GDPR | company stated | 2026-07-20 | weaviate.io/security |
| security.private-link | Private Link | company stated | 2026-07-20 | weaviate.io/pricing |
| security.rbac | RBAC | company stated | 2026-07-20 | weaviate.io/pricing |
| security.saml | SAML | company stated | 2026-07-20 | weaviate.io/pricing |
| security.sso | SSO | company stated | 2026-07-20 | weaviate.io/pricing |
| security.vpc-peering | VPC Peering | company stated | 2026-07-20 | weaviate.io/security |
Security across Vector DatabasesWeaviate ranked in place · tap through for each read
No observed security facts yet for Chroma, KDB.AI, LanceDB, Marqo, Milvus, MyScale, Vespa and Weaviate.
Get security for weaviate.io via API / MCPevery field dated and sourced
RESTopen tier
GET https://api.bixel.com/v1/companies/weaviate.io/facts?dimension=security
{
"data": {
"facts": [
{
"key": "security.cert.soc2-type-ii",
"value": true,
"provenance": "company_stated",
"as_of": "2026-07-20",
"source_url": "weaviate.io/pricing"
},
{
"key": "security.cert.hipaa",
"value": true,
"provenance": "company_stated",
"as_of": "2026-07-20",
"source_url": "weaviate.io/pricing"
},
{
"key": "security.rbac",
"value": true,
"provenance": "company_stated",
"as_of": "2026-07-20",
"source_url": "weaviate.io/pricing"
},
{
"key": "security.sso",
"value": true,
"provenance": "company_stated",
"as_of": "2026-07-20",
"source_url": "weaviate.io/pricing"
},
"…"
]
}
}MCPfor agents
# any MCP client (Claude, agents)
const record = await bixel.get_company_facts({ domain: "weaviate.io", dimension: "security" })
# returns the security record above,
# each value with its source_url + as_of,
# ready to reason overBuild on the company record. One key, REST + MCP, every signal dated and sourced back to the page it came from.
Public record, read from companies' own pages and boards. Every fact dated and sourced; provenance (observed vs company stated) shown inline.