{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"anaplan","name":"Anaplan","domain":"anaplan.com","category":"Data platforms","one_liner":"Anaplan, headquartered in San Francisco, California, provides a business modelling and planning platform in the","trust_center_url":"https://trust.anaplan.com/","security_page_url":null,"url":"https://certreports.com/vendors/anaplan/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","issued_at":"2018-04-26","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/anaplan/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/anaplan","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"anaplan: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2018-05-16","expires_at":"2027-04-13","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/anaplan/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4523","fetched_at":"2026-09-17 15:48:32.490203+00","content_hash":"489e474450a9cc9e10c062f57d6b9987117306c64d0b1440e920c8fda2ac5ee2","wayback_url":null,"quote":"Anaplan Inc: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Anaplan is listed in CSA STAR with a Level 1 self-assessment (CAIQ) and Trusted Cloud Provider status, originally issued 26 Apr 2018. As of 17 Sep 2026, Anaplan is listed in the EU-US Data Privacy Framework registry as Active, covering SW-US, EU-US, and UK Extension Certifications, issued 16 May 2018 and expiring 13 Apr 2027. As of 17 Sep 2026, no public evidence found for a SOC 2 Type II report for Anaplan. As of 17 Sep 2026, no public evidence found for HIPAA compliance or a BAA offering from Anaplan. As of 17 Sep 2026, no subprocessor information was reported in the evidence rows for Anaplan.","bullets":["As of 17 Sep 2026, listed in CSA STAR registry (Level 1 self-assessment/CAIQ, Trusted Cloud Provider), issued 26 Apr 2018.","As of 17 Sep 2026, listed in EU-US Data Privacy Framework registry as Active (SW-US, EU-US, UK Extension), issued 16 May 2018, expires 13 Apr 2027.","As of 17 Sep 2026, no public evidence found for SOC 2 or HIPAA/BAA status for Anaplan."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:48:21.586699+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T08:10:22.830Z"}