{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"8x8","name":"8x8","domain":"8x8.com","category":"Communications and CPaaS","one_liner":"8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere","trust_center_url":"https://trust.8x8.com/","security_page_url":null,"url":"https://certreports.com/vendors/8x8/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/soc-2","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/gdpr","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a PCI DSS attestation of compliance on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states PCI DSS - SAQ D, Merchant on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/pci-dss","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"PCI DSS 4.0.1","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/iso-27001","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2018-07-04","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/8x8/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/8x8-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"8x8, inc: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/security","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"ISO 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/security","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"ISO 27018:2019","confidence":1}]},{"framework":"iso-9001","framework_name":"ISO 9001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO 9001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 9001:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/security","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"ISO 9001:2015","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2016-11-14","expires_at":"2027-01-28","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/8x8/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4970","fetched_at":"2026-09-17 15:48:45.579633+00","content_hash":"12c32c82914c04942270bfe0206b7cda8e63236e5e44a1eedd8b74a79ef7df91","wayback_url":null,"quote":"8x8, INC.: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]},{"framework":"nhs-dspt","framework_name":"NHS DSPT","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an NHS DSPT assessment on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states NHS-DSPT on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/8x8/security","evidence":[{"source_type":"trust_center","source_name":"8x8 trust centre (Vanta)","url":"https://trust.8x8.com/","fetched_at":"2026-09-18 23:03:24.589284+00","content_hash":"b4dcc027dc16698fd8f63af3c9bdc9d2372dcb9dc69e6b44184176a2e7cb1346","wayback_url":null,"quote":"NHS-DSPT","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, 8x8 is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) issued 4 Jul 2018, with no expiry date recorded. As of 17 Sep 2026, 8x8 is listed in the EU-US Data Privacy Framework registry as Active, covering SW-US Certification, EU-US Certification, and UK Extension Certification, issued 14 Nov 2016 and expiring 28 Jan 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for 8x8. As of 17 Sep 2026, no public evidence found for HIPAA/BAA for 8x8. As of 17 Sep 2026, no subprocessor records were found in the evidence provided.","bullets":["CSA STAR: listed in CSA STAR registry, STAR Level 1 self-assessment (CAIQ), issued 4 Jul 2018, as of 17 Sep 2026","EU-US Data Privacy Framework: listed in DPF registry as Active (SW-US, EU-US, UK Extension Certifications), issued 14 Nov 2016, expires 28 Jan 2027, as of 17 Sep 2026","SOC 2 and HIPAA: no public evidence found as of 17 Sep 2026"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:46:03.333015+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.8x8.com/","availability":"public","detail":"27 subprocessors listed on the trust centre","as_of":"2026-09-18"},{"kind":"privacy","url":"https://www.8x8.com/terms-and-conditions/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-18"},{"kind":"security_txt","url":"https://trust.8x8.com/","availability":"public","detail":"Public documents on the trust centre: 8x8 Cyber Essentials Plus 2026-2027; 8x8 ISO 14001 2023-2026; 8x8 ISO 27001 2025-2027; 8x8 ISO 27017 2025-2027; 8x8 ISO 27018 2025-2027; 8x8 SOC3 Certificate 2025","as_of":"2026-09-18"}],"subprocessors":[{"name":"8x8 Group Companies","domain":"8x8.com","purpose":null,"location":null,"vendor_url":"https://certreports.com/vendors/8x8/security"},{"name":"Alchemer LLC","domain":"alchemer.com","purpose":"CPAAS","location":"USA","vendor_url":"https://certreports.com/vendors/alchemer/security"},{"name":"Amazon Web Services, Inc","domain":"amazon.com","purpose":"Cloud Service Provider","location":"USA, Canada, Brazil, UK, EU, Singapore, Australia","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Amplitude, Inc.","domain":"amplitude.com","purpose":"Software Provider [as a Service Provider]","location":"USA","vendor_url":"https://certreports.com/vendors/amplitude/security"},{"name":"Anthropic","domain":"anthropic.com","purpose":"AI Studio AI Model Provider","location":"USA","vendor_url":null},{"name":"Calabrio (Teleopti)","domain":"calabrio.com","purpose":"Software Provider [as a Service Provider]","location":"USA, EU, China","vendor_url":"https://certreports.com/vendors/calabrio/security"},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"AI Studio Cloud Infrastructure","location":"USA","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Cognigy GmbH","domain":"cognigy.com","purpose":"Software Provider [as a Service Provider]","location":"EU","vendor_url":null},{"name":"Creovai","domain":"creovai.com","purpose":"Software Provider [as a Service Provider]","location":"USA, Europe, Latin America","vendor_url":null},{"name":"Cronofy Limited","domain":"cronofy.com","purpose":"Software Provider [as a Service Provider]","location":"USA, EU","vendor_url":"https://certreports.com/vendors/cronofy/security"},{"name":"Deepgram","domain":"deepgram.com","purpose":"AI Studio Voice and Telephony","location":"USA","vendor_url":"https://certreports.com/vendors/deepgram/security"},{"name":"Descope","domain":"descope.com","purpose":"CPAAS","location":"USA","vendor_url":null},{"name":"Dstny (Qunifi Limited)","domain":"dstny.com","purpose":"Software Provider [as a Service Provider]","location":"USA, UK, Australia","vendor_url":null},{"name":"ElevenLabs","domain":"elevenlabs.io","purpose":"AI Studio AI Model Provider","location":"USA","vendor_url":null},{"name":"Google","domain":"google.com","purpose":"AI Studio AI Model Provider","location":"USA","vendor_url":null},{"name":"Inference (part of Five9)","domain":"five9.com","purpose":"Software Provider [as a Service Provider]","location":"USA","vendor_url":"https://certreports.com/vendors/five9/security"},{"name":"Microsoft Power BI","domain":"microsoft.com","purpose":"CPAAS","location":"USA","vendor_url":"https://certreports.com/vendors/microsoft/security"},{"name":"Movate","domain":"movate.com","purpose":"Support Service Provider","location":"Costa Rica","vendor_url":null},{"name":"OpenAI","domain":"openai.com","purpose":"AI Studio AI Model Provider","location":"USA","vendor_url":"https://certreports.com/vendors/openai/security"},{"name":"Oracle America, Inc. (Oracle Cloud Infrastructure)","domain":"oracle.com","purpose":"Cloud Service Provider","location":"USA, Canada, Brazil, UK, EU, India, Australia","vendor_url":"https://certreports.com/vendors/oracle/security"},{"name":"PCIPAL","domain":"pcipal.com","purpose":"Software Provider [as a Service Provider]","location":"USA, UK","vendor_url":"https://certreports.com/vendors/pci-pal/security"},{"name":"SpaceXAI","domain":"x.ai","purpose":"AI Studio AI Model Provider","location":"USA","vendor_url":"https://certreports.com/vendors/xai/security"},{"name":"SpinSci","domain":"spinsci.com","purpose":"Software Provider [as a Service Provider]","location":null,"vendor_url":null},{"name":"Sutherland Global Services","domain":"sutherlandglobal.com","purpose":"Support Service Provider","location":"Philippines","vendor_url":null},{"name":"Verint","domain":"verint.com","purpose":"Software Provider [as a Service Provider]","location":null,"vendor_url":"https://certreports.com/vendors/verint/security"},{"name":"Voximplant","domain":"voximplant.com","purpose":"AI Studio Voice and Telephony","location":"USA","vendor_url":"https://certreports.com/vendors/voximplant/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T08:10:16.779Z"}