Clarification on Compliance Limitations: SOC2 Type I & II, HIPAA

[NavidMirmoghtadaei]

Hello Unstructured Team,

I am considering using the open-source version of the Unstructured library for our projects and came across the project limitations statement mentioning:

Lack of security and SOC2 and HIPAA compliance.

I have a specific question regarding SOC2 compliance:

Reasons for Lack of SOC2 Compliance

1. Why does the open-source version not adhere to SOC2 compliance standards?

2. Does the open-source version process data using other services or the Unstructured API that impacts its ability to be SOC2 compliant?

3. Is there any data handling or processing in the open-source version that might compromise compliance?

Thank you for your time and support!