Certifications

Effective Date: January 1, 2026 Version: 1.0 Last Updated: March 1, 2026

This document summarizes the current certifications and compliance posture of the Estimatics platform, as well as the certifications we are actively pursuing.

1. Infrastructure Certifications (via AWS)

The Estimatics Platform is hosted entirely on Amazon Web Services. AWS maintains the following certifications that apply to the underlying infrastructure on which Estimatics operates:

Certification	Scope	Status
SOC 2 Type II	Security, Availability, Confidentiality	Active (AWS)
ISO 27001	Information Security Management	Active (AWS)
ISO 27017	Cloud Security Controls	Active (AWS)
ISO 27018	Protection of PII in the Cloud	Active (AWS)
PCI DSS Level 1	Payment Card Infrastructure	Active (AWS)
FedRAMP Moderate	U.S. Federal Cloud Security	Active (AWS)
HIPAA Eligible	Health Information (BAA available)	Active (AWS)

AWS certifications apply to the infrastructure layer. Estimatics manages security controls at the application layer, as described in our Security Overview.

2. Payment Processing Certifications (via Stripe)

All payment processing is handled by Stripe, Inc., which maintains:

Certification	Status
PCI DSS Level 1 Service Provider	Active
SOC 1 Type II	Active
SOC 2 Type II	Active

Estimatics does not store cardholder data. All payment data is tokenized by Stripe.

3. Estimatics Platform Certifications

The following certifications are currently in process or planned for the Estimatics platform application layer:

Certification	Target	Status
SOC 2 Type II (Application)	Q4 2026	In Planning
NAIC Model Law Compliance Assessment	2026–2027	In Planning
State Insurance Department Technology Vendor Approvals	Ongoing	In Progress — select states

4. Evidence Integrity

Estimatics records a per-file SHA-256 integrity hash for media, computed by the server from the bytes it receives on arrival, alongside the hash the uploading device declared, a status comparing the two, and capture provenance. These are written to an append-only evidence event log.

This operates on every plan, including FIELD. It is not a paid feature and not specific to CERTIFY.

What it is not, stated plainly:

It is not a third-party certification. No external body attests to anything
It is not a digital signature or notarization. Estimatics does not sign or seal any file, timestamp, or device identifier
There is no packaged artifact — no manifest, no sealed bundle, no exportable certificate
It records the state of a file as it arrived, not as it was captured

A public, self-service verification endpoint is not available. The record is retained on every account and can be produced on request.

Full detail, including the five verification statuses and the limits of each: aiestimatics.com/legal/evidence-disclaimer.

5. Our Commitment

We are building Estimatics to meet the standards required by carriers, TPAs, and courts as AI-assisted documentation becomes standard practice in the property insurance industry. Our certification roadmap reflects the increasing regulatory scrutiny applied to technology vendors in this space.

Updates to this page will be posted as new certifications are achieved.

Contact

Certification and compliance inquiries: legal@aiestimatics.com