{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"a-lign","name":"A-LIGN","domain":"a-lign.com","category":"Compliance and GRC","one_liner":"Find out why A-LIGN is trusted by over 6,400 clients for efficient, reliable audits that meet rigorous compliance","trust_center_url":"https://trust.a-lign.com/","security_page_url":null,"url":"https://certreports.com/vendors/a-lign/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/a-lign/soc-2","evidence":[{"source_type":"trust_center","source_name":"A-LIGN trust centre (Drata)","url":"https://trust.a-lign.com/","fetched_at":"2026-09-17 16:28:18.493416+00","content_hash":"483add9552c7e634468febe9f4920450346c883508d07db74b9d7cbd593c82a9","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/a-lign/gdpr","evidence":[{"source_type":"trust_center","source_name":"A-LIGN trust centre (Drata)","url":"https://trust.a-lign.com/","fetched_at":"2026-09-17 16:28:18.493416+00","content_hash":"483add9552c7e634468febe9f4920450346c883508d07db74b9d7cbd593c82a9","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2025-09-17","expires_at":null,"period_start":null,"period_end":null,"auditor":"RISC Point","impact_level":"20x Low","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/a-lign/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2532557612","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"A-LIGN - A-SCEND: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2532557612","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"A-LIGN - A-SCEND: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2532557612","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"A-LIGN - A-SCEND: FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/a-lign/iso-27001","evidence":[{"source_type":"trust_center","source_name":"A-LIGN trust centre (Drata)","url":"https://trust.a-lign.com/","fetched_at":"2026-09-17 16:28:18.493416+00","content_hash":"483add9552c7e634468febe9f4920450346c883508d07db74b9d7cbd593c82a9","wayback_url":null,"quote":"ISO 27001","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO 42001 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/a-lign/iso-42001","evidence":[{"source_type":"trust_center","source_name":"A-LIGN trust centre (Drata)","url":"https://trust.a-lign.com/","fetched_at":"2026-09-17 16:28:18.493416+00","content_hash":"483add9552c7e634468febe9f4920450346c883508d07db74b9d7cbd593c82a9","wayback_url":null,"quote":"ISO 42001","confidence":1}]},{"framework":"hitrust","framework_name":"HITRUST","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an HITRUST certification on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states HITRUST on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/a-lign/security","evidence":[{"source_type":"trust_center","source_name":"A-LIGN trust centre (Drata)","url":"https://trust.a-lign.com/","fetched_at":"2026-09-17 16:28:18.493416+00","content_hash":"483add9552c7e634468febe9f4920450346c883508d07db74b9d7cbd593c82a9","wayback_url":null,"quote":"HITRUST","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification","issued_at":"2020-06-15","expires_at":"2027-07-06","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/a-lign/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5406","fetched_at":"2026-09-17 15:48:58.392753+00","content_hash":"35a7e20da128a7cd9c4cbe8b753219c61b39e957dda6feaa2ecdbf7aff451196","wayback_url":null,"quote":"A-LIGN Compliance and Security, Inc.: Active: EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, A-LIGN states on its trust centre that it holds SOC 2 and GDPR. As of 17 Sep 2026, A-LIGN states on its trust centre that it holds ISO/IEC 27001, ISO/IEC 42001 and HITRUST. As of 19 Sep 2026, A-LIGN is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 17 Sep 2025 and audited by RISC Point. As of 17 Sep 2026, A-LIGN is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification and UK Extension Certification. The Data Privacy Framework registry records A-LIGN's certification as issued 15 Jun 2020 and set to expire 6 Jul 2027, as of 17 Sep 2026.","bullets":["SOC 2, GDPR, ISO/IEC 27001, ISO/IEC 42001 and HITRUST: vendor-stated on trust centre as of 17 Sep 2026.","FedRAMP: listed as FedRAMP Authorized, issued 17 Sep 2025, auditor RISC Point (as of 19 Sep 2026).","EU-US Data Privacy Framework: active, issued 15 Jun 2020, expires 6 Jul 2027 (as of 17 Sep 2026)."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:25:37.786772+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T06:08:21.477Z"}