Certifications

Effective Date: January 1, 2026 Version: 1.0 Last Updated: March 1, 2026

This document summarizes the current certifications and compliance posture of the Estimatics platform, as well as the certifications we are actively pursuing.

1. Infrastructure Certifications (via AWS)

The Estimatics Platform is hosted entirely on Amazon Web Services. AWS maintains the following certifications that apply to the underlying infrastructure on which Estimatics operates:

Certification	Scope	Status
SOC 2 Type II	Security, Availability, Confidentiality	Active (AWS)
ISO 27001	Information Security Management	Active (AWS)
ISO 27017	Cloud Security Controls	Active (AWS)
ISO 27018	Protection of PII in the Cloud	Active (AWS)
PCI DSS Level 1	Payment Card Infrastructure	Active (AWS)
FedRAMP Moderate	U.S. Federal Cloud Security	Active (AWS)
HIPAA Eligible	Health Information (BAA available)	Active (AWS)

AWS certifications apply to the infrastructure layer. Estimatics manages security controls at the application layer, as described in our Security Overview.

2. Payment Processing Certifications (via Stripe)

All payment processing is handled by Stripe, Inc., which maintains:

Certification	Status
PCI DSS Level 1 Service Provider	Active
SOC 1 Type II	Active
SOC 2 Type II	Active

Estimatics does not store cardholder data. All payment data is tokenized by Stripe.

3. Estimatics Platform Certifications

The following certifications are currently in process or planned for the Estimatics platform application layer:

Certification	Target	Status
SOC 2 Type II (Application)	Q4 2026	In Planning
NAIC Model Law Compliance Assessment	2026–2027	In Planning
State Insurance Department Technology Vendor Approvals	Ongoing	In Progress — select states

4. Evidence Integrity (CERTIFY Plan)

The Certified Evidence feature on the CERTIFY plan uses per-file SHA-256 integrity hashing, recorded in an evidence audit log, to create tamper-evident records. This is a proprietary integrity mechanism specific to the Estimatics platform.

Certified evidence packages include:

A manifest of all included files and their per-file SHA-256 hashes
A platform-signed attestation of the capture timestamp and device identifier
An evidence audit log recording when each file's hash was captured

This mechanism is designed for use in insurance appraisals and legal proceedings. It is not a third-party certification — it is a technical integrity guarantee backed by Estimatics. A public, self-service verification endpoint is planned but not yet available.

5. Our Commitment

We are building Estimatics to meet the standards required by carriers, TPAs, and courts as AI-assisted documentation becomes standard practice in the property insurance industry. Our certification roadmap reflects the increasing regulatory scrutiny applied to technology vendors in this space.

Updates to this page will be posted as new certifications are achieved.

Contact

Certification and compliance inquiries: legal@aiestimatics.com