Stitch
Connect Stitch to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Stitch connection as data export evidence. Automated collection is not available for this provider yet.
| Category | Data Export |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Stitch:
- In your Stitch client account, open the Account Settings page.
- Create an API access token there (tokens start with
ac_and do not expire) and copy it.
Where to find the other values:
- Account / Org / Workspace (optional): Each API access token is tied to a single Stitch client account; no separate account ID is needed for authentication.
Stitch's public documentation does not cover every step.
Stitch Connect API access is available to individual users during the Free Trial or on Advanced or Premium plans. The API reference says tokens are created, revoked and deleted on the Account Settings page but does not give the button labels, so the exact clicks are not sourced. Stitch documents no read-only or scoped token; the token controls the whole client account.
Source: stitchdata.com, checked 2026-10-07.
-
On Compliance › Connectors, open Stitch, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Stitch publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC6.2, CC6.3 | 1 |
| ISO/IEC 27001 | Attestation | A.5.18 | 1 |
| HIPAA Security Rule | Attestation | 164.308(a)(3) | 1 |
| PCI DSS | Attestation | 7.2.4 | 1 |
| NIST CSF 2.0 | Attestation | PR.AA-05 | 1 |
These tests are switched on per workspace by the Safeguard team.
Related
- Data Export connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks