Descartes Visual Compliance

Automated compliance screening software

descartes.com

Enterprise evidence

Procurement review needed

Public information covers security assurance, sso & provisioning, reliability & support. Still unresolved: access controls, auditability, data handling.

10 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-23

4 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceCompany-published
SOC 2 Type II reportingReviewed 2026-10-23View source
Descartes operates a security-first SaaS infrastructure governed by SOC 2 Type II and ISO 27001 standards, with 24/7 threat monitoring and fully redundant architecture across six global data centers.Reviewed 2026-10-23View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningCompany-published
Single sign-on (SSO) should be part of the process to minimize the number of login credentials required and streamline business processes.Reviewed 2026-10-23View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityMixed claims — review
Risk Mitigation The automated, centralized Descartes solution helps easily screen potential business partners and provides an automatically generated audit trail to ensure reliable export compliance.Reviewed 2026-10-23View source
### Q: How do you maintain an audit trail using the Descartes MK Denial solution?Reviewed 2026-10-23View source
### Q: How long does the system keep the audit trail?Reviewed 2026-10-23View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingMixed claims — review
Data Processing Agreements | DescartesReviewed 2026-10-23View source
# Data Processing AgreementsReviewed 2026-10-23View source
Descartes will Process Personal Data as necessary for the purposes of the Agreement in accordance with this DPA and will not disclose Personal Data to third parties other than to Descartes’ Affiliates or Third Party Processors for the aforementioned purposes or as required by law.Reviewed 2026-10-23View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published
For data centre migrations other than for the purposes of disaster recovery, Descartes will provide a minimum of thirty (30) days notice to Customer.Reviewed 2026-10-23View source
Data Backup and Disaster RecoveryReviewed 2026-10-23View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessCompany-published
### 10th Annual Global Transportation Management Benchmark SurveyReviewed 2026-10-23View source

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Descartes provides modular, scalable compliance software used by small businesses and high-tech manufacturers like Adafruit for denied party screening and license management. It supports API integration with existing ERPs and sales platforms.

Worth asking

How does the product maintain high performance and low latency when integrated with specialized small-business storefronts that lack robust IT infrastructure?

Sources

Evidence details

Enterprise controls

SOC 2 Type II reporting Descartes operates a security-first SaaS infrastructure governed by SOC 2 Type II and ISO 27001 standards, with 24/7 threat monitoring and fully redundant architecture across six global data centers

Developer access

API availability has not been verified.

Last checked Oct 23, 2026

Company-published evidence, not an independent audit. Unknown means unverified.