Editorial notice: vettedaiagents.com is an independent editorial directory. Not affiliated with, endorsed by, or sponsored by any vendor named on this site. Vetting is editorial, not compliance certification. Verify all claims directly with vendors before purchasing. Vetting last reviewed April 2026
Compliance snapshot, reviewed July 2026

Is Writer SOC 2 compliant? Yes, plus HIPAA and the full ISO trust triad.

Writer completes an annual SOC 2 Type II audit that also covers HIPAA/HITECH, and holds the full ISO trust triad: ISO/IEC 27001, 27701 and 42001. Because it is certified to ISO 42001 (AI management) as well as the information-security and privacy standards, Writer meets all seven of the seven criteria on this site, including the AI-specific governance criterion that most vendors still miss.

SOC 2 Type II + HIPAA
Yes
ISO 27001 / 27701
Yes
ISO 42001 (AI)
Yes
Trains on your data?
No, by default

Source: trustcenter.writer.com (SOC 2 Type II, ISO/IEC 27001, 27701, 42001, HIPAA) and writer.com ISO trust triad announcement. Editorial vetting, not a compliance certification; verify directly before purchase.

Data handling: training, retention and residency

How Writer handles your data, in detail

Does Writer train its AI models on my data?

No, not by default. Writer trains its own Palmyra family of large language models rather than reselling a third-party model, which lets it offer a zero-data-retention posture. By default it does not train or improve its models on customer data, so there is no separate training opt-out to request.

Is Writer HIPAA compliant, and does it support regulated sectors?

Yes. Writer's annual SOC 2 Type II audit includes HIPAA/HITECH, and Writer publishes domain-specific models for regulated sectors such as Healthcare and Finance. Teams handling protected health information should confirm a Business Associate Agreement directly with Writer before deployment.

Where is my data stored, and does Writer offer data residency?

Writer positions data residency and zero data retention as first-class enterprise governance features, and lists US and EU regions. Because residency options vary by contract and region, confirm the specific hosting region and residency guarantees directly with Writer before purchase.

Sources: trustcenter.writer.com, writer.com ISO trust triad announcement. Editorial vetting, not a compliance certification; verify directly before purchase.

W

Writer

7/7 criteria
Enterprise Search / Knowledge
Vetting last reviewed July 2026

7-Criterion Scorecard

Security Certifications
Public Reference Customers
Pricing Transparency
Data Residency + Training Opt-Out
Outcome Accountability
Time in Market
Team Composition

Public Reference Customers

Pricing Transparency

Contact sales

Model: Custom enterprise

writer.com/pricing

Data Residency and Training Opt-Out

Regions: US, EU

Training opt-out: Yes, available

Retention: Zero data retention by default; Writer does not train its Palmyra models on customer data. Enterprise data residency options available.

trustcenter.writer.com

Outcome Accountability

Model: Published quality benchmarks

Published writing quality and workflow automation benchmarks

writer.com

Time in Market

Founded: 2020

Public launch: 2020

Customers (min triangulated): 500+

Team Composition

Founders: May Habib, Waseem Alshikh

writer.com/company/about/
Vendor at a Glance
Writer
Score7 of 7
VerticalEnterprise Search, Knowledge
Founded2020
PricingContact sales
ISO 42001Yes
SOC 2Yes
ReviewedJuly 2026
Editorial vetting, not compliance certification. Verify before purchase.