airbyte.com
A
93 of 100
Enterprise AI readiness, from public pages only
Scanned 2026-11-01 from 100 public pages. Methodology 1.0. Category: Data.
| Identity | 14 of 14 | |
| Assurance | 25 of 25 | |
| Data and AI terms | 12 of 17 | |
| Deployment | 10 of 10 | |
| Agent readiness | 16 of 17 |
Identity
SAML or OIDC single sign-on (10 points) Found
Manage user access to Airbyte from your Okta, Azure Entra ID or OIDC-compatible identity provider.
source
SCIM provisioning (6 points) Under review
Assurance
SOC 2 Type 2 (10 points) Found
SOC 2 Type II assessment: An independent third-party completed a SOC2 Type II assessment and found effective operational controls in place.
source
ISO 27001 (4 points) Found
ISO 27001 certification: We received our ISO 27001 certification in November 2022.
source
security.txt (2 points) Found
Contact: https://airbyte.com/security/vdp
source
Data and AI terms
No training on customer data (8 points) Found
Airbyte does not collect or use customer data to develop, improve, or train generalized artificial intelligence and/or machine learning models.
source
Retention periods (5 points) Under review
Subprocessor list (5 points) Not found in public pages
Pages searched (3)
https://airbyte.com/company/termshttps://airbyte.com/company/termshttps://airbyte.com/company/terms-airbyte-agents
Data processing agreement (4 points) Found
Data Processing Addendum
sourceincludes any information that reasonably relates, directly or indirectly, to an identified or identifiable natural person (" Personal Data "), the parties agree to comply with their respective obligations under the Airbyte Data Processing Addendum , which is hereby incorporated into this Agreement.
sourceAct (" GLBA ") and other U.S. federal, state, or foreign laws applying specific security standards (collectively, " Special Data "), Customer shall evaluate whether the technical and organizational measures described in the Data Processing Addendum are sufficient to protect Special Data.
source
Data residency (4 points) Could not check
This check needs a reading step that was not available for this scan.
Deployment
Agent readiness
Public API reference (5 points) Found
Airbyte's low-code framework enables you to build source connectors for REST APIs via a connector builder UI or by modifying boilerplate YAML files via terminal or text editor.
source
Official MCP server (6 points) Found
io.github.airbytehq/airbyte: Build and manage data pipelines, add custom connectors, and chat with your data.
source
Controls on AI agent actions (4 points) Found
Audit log export (2 points) Partly found
Pro and Enterprise Flex organizations have audit logs that record who changed workspaces, connections, connectors, users, permissions, and settings.
source
AI use policy (2 points) Could not check
The scan reached its page or time limit before reading the pages this check needs.
Rate limits documented (not scored) Found
Gracefully handling rate limiting by implementing exponential backoff, fixed-time backoff, or variable-time backoff
sourceAgents can then answer questions that no single API can, without overloading your source systems or hitting their rate limits.
sourceThroughput and rate limits: when you exceed API throughput or many queries run concurrently, Facebook may return partial datasets or suppress some metrics.
source
Changelog
- 2026-11-01: 92 to 93 (rescan) Subprocessor list: Could not check to Not found in public pages; Customer-managed keys: Could not check to Found; SAML or OIDC single sign-on: Partly found to Found
- 2026-11-01: First score, 92
Scores older than an hour can be refreshed.