Customer-service agent Robylon AI says it is 'SOC 2 and HIPAA compliant'; no certificate, auditor or report date published

Robylon AI, a customer-service automation platform, states on its site: "Robylon is SOC 2 and HIPAA compliant, and aligned to GDPR and CPRA." The sentence makes two different kinds of claims at once — compliance for SOC 2 and HIPAA, versus mere alignment for GDPR and CPRA — and names no auditor, report type, certificate number or assessment date for either.

The company's site does reference internal monitoring. It says agent accuracy is "held there by 24/7 human oversight and automated LLM audits that correct the agent rather than waiting for a customer to complain." That describes a quality-control loop aimed at accuracy, not a retained, customer-reviewable audit trail of agent actions — a distinction aidispatch.news's index tracks separately, and on which Robylon's site offers nothing.

A full-text search of the capture — 13,234 characters — found zero occurrences of "insurance," "indemn" or "warrant." Robylon's site does not address what recourse a customer has, financially, if an automated support interaction goes wrong.

The distinction matters for buyers in health care and other regulated sectors, where "SOC 2 and HIPAA compliant" is a specific, auditable claim rather than a marketing description. A customer relying on Robylon to handle protected health information under that claim would need to request the underlying SOC 2 report directly, since the capture publishes no link to one.

Runtime governance is recorded as no_public_information in the index for Robylon AI against the same capture — the site states what its agents are checked for after the fact, not what limits, if any, are enforced on them while they run.