{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"button","name":"Button","domain":"usebutton.com","category":"E-commerce","one_liner":"Powering measurable outcomes across creator and affiliate","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/button/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2016-09-13","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/button/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/8615","fetched_at":"2026-11-02 05:03:27.328393+00","content_hash":"92a47589c8acfd5aba0ba05794ce082fb9a8ec31102386ff78292b3ce29a3795","wayback_url":null,"quote":"Button: Inactive","confidence":1}]}],"brief":{"summary":"Button is listed in the EU-US Data Privacy Framework registry as Inactive as of 05 Oct 2026, indicating an expired certification. The EU-US Data Privacy Framework registry record shows the certification was originally issued on 13 Sep 2016, as of 05 Oct 2026. No expiration date is provided in the registry record for Button as of 05 Oct 2026. No SOC 2, HIPAA or GDPR evidence was found in the supplied rows for Button as of 05 Oct 2026. As of 05 Oct 2026, the EU-US Data Privacy Framework is the only framework with public evidence for this vendor, and the absence of other frameworks reflects no public evidence found rather than non-compliance.","bullets":["EU-US Data Privacy Framework: listed in registry as Inactive (expired) as of 05 Oct 2026, originally issued 13 Sep 2016.","SOC 2: no public evidence found as of 05 Oct 2026.","HIPAA / GDPR: no public evidence found as of 05 Oct 2026."],"model":"claude-sonnet-5","generated_at":"2026-10-10 03:36:56.042761+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/button/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T18:55:48.949Z"}