{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"blueconic","name":"BlueConic","domain":"blueconic.com","category":"Marketing","one_liner":"BlueConic unifies customer data and activation to drive real-time growth across every","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/blueconic/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2017-12-12","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/blueconic/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5663","fetched_at":"2026-11-02 05:02:17.2013+00","content_hash":"2778484c30bcab25847c5f61118f4370b0636de659abf4c2079381c952688c95","wayback_url":null,"quote":"BlueConic: Inactive","confidence":1}]}],"brief":{"summary":"BlueConic (blueconic.com), a marketing vendor, is listed in the EU-US Data Privacy Framework registry as inactive, with the certification originally issued 12 Dec 2017 and no active status recorded as of 17 Sep 2026. For SOC 2, no public evidence was found as of 17 Sep 2026. For ISO 27001, no public evidence was found as of 17 Sep 2026. For HIPAA, no public evidence was found as of 17 Sep 2026, including no indication of a business associate agreement. For PCI DSS, no public evidence was found as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework - listed as inactive, originally issued 12 Dec 2017 (as of 17 Sep 2026).","SOC 2 and ISO 27001 - no public evidence found (as of 17 Sep 2026).","HIPAA and PCI DSS - no public evidence found (as of 17 Sep 2026)."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-23 10:16:46.948868+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/blueconic/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T08:59:52.637Z"}