Descartes Visual Compliance
Automated compliance screening software
descartes.comEnterprise evidence
Procurement review neededPublic information covers security assurance, sso & provisioning, reliability & support. Still unresolved: access controls, auditability, data handling.
10 official sources · Fresh page review · Not independently tested
Sources reviewed 2026-10-23
4 / 7 areas with published evidence · 0 independently verified
Evidence & checks
Security assuranceCompany-published
SOC 2 Type II reportingReviewed 2026-10-23View source
Descartes operates a security-first SaaS infrastructure governed by SOC 2 Type II and ISO 27001 standards, with 24/7 threat monitoring and fully redundant architecture across six global data centers.Reviewed 2026-10-23View source
Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
SSO & provisioningCompany-published
Single sign-on (SSO) should be part of the process to minimize the number of login credentials required and streamline business processes.Reviewed 2026-10-23View source
Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.
Access controlsNot found
Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.
AuditabilityMixed claims — review
Risk Mitigation The automated, centralized Descartes solution helps easily screen potential business partners and provides an automatically generated audit trail to ensure reliable export compliance.Reviewed 2026-10-23View source
### Q: How do you maintain an audit trail using the Descartes MK Denial solution?Reviewed 2026-10-23View source
### Q: How long does the system keep the audit trail?Reviewed 2026-10-23View source
Before relying on it
Verify administrative and data-access events, retention and export.
Data handlingMixed claims — review
Data Processing Agreements | DescartesReviewed 2026-10-23View source
# Data Processing AgreementsReviewed 2026-10-23View source
Descartes will Process Personal Data as necessary for the purposes of the Agreement in accordance with this DPA and will not disclose Personal Data to third parties other than to Descartes’ Affiliates or Third Party Processors for the aforementioned purposes or as required by law.Reviewed 2026-10-23View source
Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.
Reliability & supportCompany-published
For data centre migrations other than for the purposes of disaster recovery, Descartes will provide a minimum of thirty (30) days notice to Customer.Reviewed 2026-10-23View source
Data Backup and Disaster RecoveryReviewed 2026-10-23View source
Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.
Product effectivenessCompany-published
### 10th Annual Global Transportation Management Benchmark SurveyReviewed 2026-10-23View source
Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
Published claims are not verified controls. No hands-on performance or security testing has been performed.
What we know
Descartes provides modular, scalable compliance software used by small businesses and high-tech manufacturers like Adafruit for denied party screening and license management. It supports API integration with existing ERPs and sales platforms.
Worth asking
How does the product maintain high performance and low latency when integrated with specialized small-business storefronts that lack robust IT infrastructure?
Sources
- Home | Descartesdescartes.com
- Data Processing Agreements | Descarteswww.descartes.com
- Descartes Vs Roadnet | Descartes.comwww.descartes.com
- Master Terms | Descarteswww.descartes.com
- GLN Services Delivery Policy | Descarteswww.descartes.com
- Descartes Online Subscription Terms for SaaS Serviceswww.descartes.com
- General Privacy Policywww.descartes.com
- Fleet IT Security | 10 Software Considerations |www.descartes.com
Evidence details
Enterprise controls
SOC 2 Type II reporting Descartes operates a security-first SaaS infrastructure governed by SOC 2 Type II and ISO 27001 standards, with 24/7 threat monitoring and fully redundant architecture across six global data centers
Developer access
API availability has not been verified.
Last checked Oct 23, 2026
Company-published evidence, not an independent audit. Unknown means unverified.