A
Trust rating
Excellent · 95/100
Procurement snapshot
No critical findings. The 1 remaining item is configuration gap, not architectural problems.
Strengths
SOC 2 Type II
Known Breaches
HSTS Header
Security Headers
Estimated remediation effort: 1–2 days
Based on a passive external scan — supplement with vendor-provided attestations, not a replacement.
Trust Score Trend
→ No change
1 scan · Last scanned February 18, 2026
Your rating
Industry average
Score
100
75
50
25
0
A
95/100
Compliance & Certifications
SOC 2 Type II
ISO 27001
3rd party · accredited body
Pro subscribers only
GDPR
Self-reported
Pro subscribers only
Incident History
None in 12 months
March 2026
ChatGPT data exposure
1 source
Pro subscribers only
April 2023 – Feb 2026
ChatGPT data exposure
1 source
Pro subscribers only
Security Posture
1 item need attention
9 passed
Tidy up your SSL certificate setup
Certificate Hygiene
This is a minor certificate-hygiene item, not an active risk. Nothing urgent here, but worth cleaning up: you're using a "wildcard" certificate that covers every subdomain at once. A wildcard certificate is convenient, but if it's ever compromised, every subdomain is exposed at once — separate certificates per subdomain limit that risk.
How to fix this
1Consider using separate certificates for sensitive subdomains instead of one wildcard covering everything.
2Stick to one certificate provider (e.g. Let's Encrypt) rather than mixing several — it's easier to track renewals.
View all 9 passed checks
Known Breaches
HSTS Header
Security Headers
DNS Configuration
TLS Configuration
DMARC / Email Security
MX Records & Mail Provider
CVE Exposure
Subprocessors & Tech Stack
Company Signals
Claim profile →
Operational risk
Low
11 yrs operating. Well-funded
Lynxradar · Composite signal
Last funding
$40B
Series F · Mar 2025 · SoftBank-led
Crunchbase ↗
Employees
~3,000
+40% YoY growth
LinkedIn ↗
Trust Resources
Claim profile →
Vanta Trust Center
trust.sapling.ai
Security page
sapling.ai/security ↗
Privacy Policy
sapling.ai/privacy ↗
DPA (Data Processing Agreement)
sapling.ai/dpa ↗
Updated recently
Subprocessors List
sapling.ai/policies/subprocessors ↗
Similar companies in B2B SaaS / Software
Appears in
Claim profile →
SOC 2 Type II certified vendors
847 companies · Updated weekly by LynxRadar
ISO 27001 certified SaaS
312 companies · Updated weekly by LynxRadar
Top AI vendors by trust score
94 companies · LynxRadar ranking
Enterprise-ready SaaS · Trust score A or above
203 companies · LynxRadar ranking
