docs: point compliance page to Ory Trust Center

[tricky42]

Summary

• Bump ISO 27001 reference from the 2013 revision to 2022.
• Remove the direct ISO certificate PDF link and auditor-directory link; point readers to trust.ory.com for the ISO cert, SOC 2 Type 2 report, and all other compliance documentation.
• Drop the now-unused routes.resources.iso27001 entry in src/components/ConsoleLink/console-routes.ts.

The certificate PDF itself is hosted on ory.com (not this repo), so removing that asset is a separate follow-up for the website.

Summary by CodeRabbit

• Documentation
  • Updated ISO 27001 certification reference to the 2022 standard
  • Compliance documentation now accessed through Ory Trust Center
  • Refined SOC 2 Type 2 report reference language

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 6c49c269-d7a1-4d89-a075-3bbd7db8236f

📥 Commits

Reviewing files that changed from the base of the PR and between 2f2307f and 7fb3ebc.

📒 Files selected for processing (2)

• docs/security-compliance/compliance-and-certifications.md
• src/components/ConsoleLink/console-routes.ts

💤 Files with no reviewable changes (1)

• src/components/ConsoleLink/console-routes.ts

---

📝 Walkthrough

Walkthrough

The pull request updates documentation references for ISO 27001 from the 2013 standard to 2022, removing direct certificate download links and instead directing users to the Ory Trust Center. A corresponding route mapping for the ISO 27001 resource is removed from the console routes configuration.

Changes

Cohort / File(s)	Summary
Compliance Documentation docs/security-compliance/compliance-and-certifications.md	Updated ISO 27001 section to reference 2022 standard instead of 2013; removed certificate download link and auditor verification wording; directed users to Ory Trust Center instead. Updated SOC 2 Type 2 section wording to reference latest report and standardized request language to "can request access" at Trust Center.
Console Routes Configuration src/components/ConsoleLink/console-routes.ts	Removed the resources object property containing the iso27001 URL mapping. All other route entries remain unchanged.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The PR description provides a clear summary of changes but lacks some template sections like Related Issue documentation and the required checklist items.	Add the Related Issue section and complete the PR checklist to meet template requirements, particularly confirming CLA signature and security policy acknowledgment.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately reflects the main objective of the PR: updating the compliance documentation page to reference the Ory Trust Center instead of direct certificate links.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch abu/update-compliance-page

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Updates compliance documentation to reference the current ISO 27001 revision and centralizes compliance artifacts in the Ory Trust Center, while removing an unused console route entry.

Changes:

• Update ISO 27001 reference from 2013 to 2022 and direct readers to trust.ory.com for compliance documentation.
• Adjust SOC 2 Type 2 section wording to reference requesting access via the Trust Center.
• Remove the unused routes.resources.iso27001 route entry from console routes.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
src/components/ConsoleLink/console-routes.ts	Removes the unused resources.iso27001 URL from the exported routes map.
docs/security-compliance/compliance-and-certifications.md	Updates ISO 27001 and SOC 2 guidance to point to the Ory Trust Center and refreshes the ISO revision reference.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.