I have a client that is sensitive to SOC2 compliance. I get the impression the API platform is SOC2 compliant, but I am not sure if the Codex CLI technically belongs to this or not. Does anyone know whether or not the SOC2 compliance extends explicitly to Codex?
big bro
openai as a platform is soc2, since codex runs off that , it inherets that bro bro - codex aint its own thing TTBOMK. i doubt it independantly would have had that audit
and most people here are def soc3 - good luck secret squirell friend!