{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"cerence","name":"Cerence","domain":"cerence.com","category":"Automotive and mobility","one_liner":"Delivering conversational and agentic AI-powered, user experiences for automotive and","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/cerence/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2019-12-05","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/cerence/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/3255","fetched_at":"2026-11-02 05:01:20.122395+00","content_hash":"256def233b35b60d66361d4a1aed454728cadea6b24ab5834ed5c38682e8ce93","wayback_url":null,"quote":"Cerence Inc.: Inactive","confidence":1}]}],"brief":{"summary":"Cerence's EU-US Data Privacy Framework registry entry is marked inactive as of 26 Oct 2026, with the certification originally issued on 05 Dec 2019 and no current expiration date on file. The status text records the listing as expired under the EU-US Data Privacy Framework as of 26 Oct 2026. No public evidence was found for SOC 2 as of 26 Oct 2026. No public evidence was found for ISO/IEC 27001 as of 26 Oct 2026. No public evidence was found for HIPAA or GDPR as of 26 Oct 2026.","bullets":["EU-US Data Privacy Framework: listed in registry, expired, issued 05 Dec 2019 (as of 26 Oct 2026).","SOC 2: no public evidence found (as of 26 Oct 2026).","ISO/IEC 27001, HIPAA, GDPR: no public evidence found (as of 26 Oct 2026)."],"model":"claude-sonnet-5","generated_at":"2026-10-30 05:31:58.015203+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/cerence/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:19:20.330Z"}