Chroma
Security Posture
Baseline security
As of October 29, 2026, Chroma's security: Holds SOC 2 Type II.
Backed by 2 dated facts
Every value derives from a dated, sourced capture — open any fact for its source.
Every value derives from a dated, sourced capture — open any fact for its source.
Certifications
SOC 2 Type II
Details
Data residencyUs
Security Change Historydated events · values unlock with a key
Security signal added: Data Residency
Security signal removed: SOC 2 · high significance
Security signal removed: Encryption At REST
Security signal removed: Encryption In Transit
Security signal removed: MFA
Security signal removed: Pen Testing
Security signal removed: RBAC
Security signal removed: SSO
Every security fact on this pagekey · value · provenance · dated · sourced
| Fact | Value | Provenance | As of | Source |
|---|---|---|---|---|
| security.cert.soc2-type-ii | SOC 2 Type II | company stated | 2026-10-29 | www.trychroma.com/security |
| security.data_residency | us | company stated | 2026-10-29 | www.trychroma.com/security |
Security across Vector DatabasesChroma ranked in place · tap through for each read
| Company | Security read | Facts |
|---|---|---|
| Pinecone | Enterprise-grade | 14 |
| Zilliz | Compliance-ready | 13 |
| Turbopuffer | Compliance-ready | 12 |
| Qdrant | Compliance-ready | 9 |
| Weaviate | Compliance-ready | 9 |
| Vectara | Compliance-ready | 4 |
| Activeloop | Baseline security | 3 |
| Chroma this record | Baseline security | 2 |
| Epsilla | Baseline security | 2 |
| LanceDB | Baseline security | 2 |
| Vespa | Baseline security | 2 |
No observed security facts yet for KDB.AI, Marqo, Milvus, MyScale and TopK.
IdentityBixel ID · free forever
Operated by
No registered company joined yet. Would resolve with: a registry identifier for the entity; a legal page on the site naming the registered company.
Registry identifiers
None on record.
Published identifiers
None read from the company's own pages yet.
Get security for trychroma.com via API / MCPevery field dated and sourced
RESTopen tier
GET https://api.bixel.com/v1/companies/trychroma.com/facts?dimension=security
{
"data": {
"facts": [
{
"key": "security.cert.soc2-type-ii",
"value": true,
"provenance": "company_stated",
"as_of": "2026-10-29",
"source_url": "www.trychroma.com/security"
},
{
"key": "security.data_residency",
"value": "us",
"provenance": "company_stated",
"as_of": "2026-10-29",
"source_url": "www.trychroma.com/security"
},
"…"
]
}
}MCPfor agents
# any MCP client (Claude, agents)
const record = await bixel.get_company_facts({ domain: "trychroma.com", dimension: "security" })
# returns the security record above,
# each value with its source_url + as_of,
# ready to reason overBuild on the company record. One key, REST + MCP, every signal dated and sourced back to the page it came from.
Public record, read from companies' own pages and boards. Every fact dated and sourced; provenance (observed vs company stated) shown inline.