{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"cerebri-ai","name":"Cerebri AI","domain":"cerebriai.com","category":"Procurement","one_liner":"AI agents that execute corporate travel and procurement tasks","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/cerebri-ai/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: UK Extension Certification, EU-US Certification, SW-US Certification","issued_at":"2018-07-31","expires_at":"2027-09-20","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/cerebri-ai/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6021","fetched_at":"2026-11-02 05:02:25.854696+00","content_hash":"aefdb781930d9427997eb0a8bf0fad3c068c4ca7394f0fbc35056ed03fb7e9d1","wayback_url":null,"quote":"Cerebri AI Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification","confidence":1},{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6021","fetched_at":"2026-09-17 15:49:17.554943+00","content_hash":"0c3ca969891be1a68020c78bcb0921f540253302f2b5842e54964fb5b0aab4e2","wayback_url":null,"quote":"Cerebri AI Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification","confidence":1}]}],"brief":{"summary":"Cerebri AI is listed in the EU-US Data Privacy Framework registry as of 26 Oct 2026, showing an active status for the EU-US Certification, the UK Extension Certification and the SW-US Certification. The registry record lists an issue date of 31 Jul 2018 and an expiration date of 20 Sep 2027 under the EU-US Data Privacy Framework. No public evidence was found for SOC 2 as of 26 Oct 2026. No public evidence was found for ISO/IEC 27001 as of 26 Oct 2026. No public evidence was found for HIPAA or GDPR as of 26 Oct 2026.","bullets":["EU-US Data Privacy Framework: listed in registry, active, issued 31 Jul 2018, expires 20 Sep 2027 (as of 26 Oct 2026).","SOC 2: no public evidence found (as of 26 Oct 2026).","ISO/IEC 27001, HIPAA, GDPR: no public evidence found (as of 26 Oct 2026)."],"model":"claude-sonnet-5","generated_at":"2026-10-30 05:31:58.002695+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/cerebri-ai/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-06T00:12:06.963Z"}