Magic LibraryThread Trust Center
Live control monitoring, the current certification status, and the security documents available
for request. This is the authoritative source — always link a client here rather than quoting a
status from a doc that may have moved on.
Current status
What you can send a client today
- The Trust Center link above — self-serve, always current, no NDA needed to view.
- A bridge letter, under NDA. Ask your Customer Success Manager.
- The sub-processor list — Thread sub-processors.
- The technical detail auditors actually ask for: data encryption, Magic AI privacy & security, Claude on AWS Bedrock, and IP addresses and domains to allowlist.
Infrastructure providers
Thread’s own status is separate from its infrastructure’s. Both matter to an auditor.Answering a client security questionnaire
Two things help here, and they’re different:- Thread’s posture — this page plus the Trust Center. If a question isn’t answered by either, ask your Customer Success Manager rather than inferring.
- Your own evidence — the Magic Library has a compliance bench for assembling your documentation, including SOC 2 evidence collection and security questionnaire / vendor DDQ. Those help you answer for your own organisation; they don’t stand in for Thread’s attestations.