{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"act-on-software","name":"Act-On Software","domain":"act-on.com","category":"No-code and automation","one_liner":"Act-On offers agile, AI-driven marketing automation to create, measure, and refine campaigns faster, backed by world-class","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/act-on-software/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: UK Extension Certification, SW-US Certification, EU-US Certification","issued_at":"2016-09-20","expires_at":"2027-04-07","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/act-on-software/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/7583","fetched_at":"2026-11-02 05:03:02.727858+00","content_hash":"52b3dbf8bdd9442809ea7d20acb7a771598cb4e32d82b69108da7d347d0296b0","wayback_url":null,"quote":"Act-On Software: Active: UK Extension Certification, SW-US Certification, EU-US Certification","confidence":1}]}],"brief":{"summary":"Act-On Software is listed in the EU-US Data Privacy Framework registry as active, with EU-US Certification, SW-US Certification, and UK Extension Certification all current as of 05 Oct 2026. The registry record shows an original issue date of 20 Sep 2016 and a current expiry of 07 Apr 2027. As of 05 Oct 2026, the Data Privacy Framework listing remains active and has not expired. No public evidence was found for SOC 2, ISO 27001, or HIPAA for Act-On Software as of 05 Oct 2026. Reviewers should treat the Data Privacy Framework listing as the only independently verified control framework currently documented for this vendor.","bullets":["EU-US Data Privacy Framework: listed as active (EU-US, SW-US, UK Extension Certifications), current through 07 Apr 2027 (as of 05 Oct 2026)","Data Privacy Framework original issue date: 20 Sep 2016","No public evidence found for SOC 2, ISO 27001, or HIPAA as of 05 Oct 2026"],"model":"claude-sonnet-5","generated_at":"2026-10-11 05:36:40.154286+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/act-on-software/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T08:59:48.727Z"}