{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"blackthorn-io","name":"Blackthorn.io","domain":"blackthorn.io","category":"Payments","one_liner":"Manage events & collect payments – powered by Salesforce™ Blackthorn’s applications connect natively to Salesforce, so you can harness your","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/blackthorn-io/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2024-07-01","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/blackthorn-io/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/blackthorn-io","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"blackthorn.io: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2026-04-01","expires_at":"2027-04-01","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/blackthorn-io/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/10012","fetched_at":"2026-09-17 15:51:25.399271+00","content_hash":"3037205584b831a20c19c16ade4089e20131bb4dc6b035cc47897351f9675e1a","wayback_url":null,"quote":"Blackthorn.io: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Blackthorn.io is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) issued 1 Jul 2024. As of 17 Sep 2026, Blackthorn.io is listed in the EU-US Data Privacy Framework registry with active EU-US Certification, SW-US Certification, and UK Extension Certification, issued 1 Apr 2026 and expiring 1 Apr 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for Blackthorn.io. As of 17 Sep 2026, no public evidence found for HIPAA for Blackthorn.io. As of 17 Sep 2026, no subprocessor evidence was found in the supplied rows for Blackthorn.io.","bullets":["CSA STAR: listed in registry, STAR Level 1 self-assessment (CAIQ), issued 1 Jul 2024 (as of 17 Sep 2026).","EU-US Data Privacy Framework: listed in registry as active (EU-US, SW-US, UK Extension), issued 1 Apr 2026, expires 1 Apr 2027 (as of 17 Sep 2026).","SOC 2 and HIPAA: no public evidence found as of 17 Sep 2026."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:54:49.86051+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T12:31:36.574Z"}