{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"ceros","name":"Ceros","domain":"ceros.com","category":"No-code and automation","one_liner":"Create no-code interactive content that earns attention and drives","trust_center_url":"https://trust.ceros.com/","security_page_url":null,"url":"https://certreports.com/vendors/ceros/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/ceros/soc-2","evidence":[{"source_type":"trust_center","source_name":"Ceros trust centre (Vanta)","url":"https://trust.ceros.com/","fetched_at":"2026-09-18 23:03:46.146429+00","content_hash":"561a95e949c944a69919a8d6cc850b3af6251db1ec22fab8eedaa6a6f06c0500","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/ceros/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Ceros trust centre (Vanta)","url":"https://trust.ceros.com/","fetched_at":"2026-09-18 23:03:46.146429+00","content_hash":"561a95e949c944a69919a8d6cc850b3af6251db1ec22fab8eedaa6a6f06c0500","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2018-09-04","expires_at":"2027-05-22","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/ceros/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/7707","fetched_at":"2026-09-17 15:50:14.011586+00","content_hash":"3dfd45584c166cff6645379515f4a21f6c69ca0a0c5dc722c64843d34ca1b697","wayback_url":null,"quote":"Ceros, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Ceros states on its trust centre that it holds SOC 2, as of 18 Sep 2026. Ceros also states on its trust centre that it holds ISO/IEC 27001:2022, as of 18 Sep 2026. Ceros is listed in the EU-US Data Privacy Framework registry as of 17 Sep 2026, with active EU-US, SW-US and UK Extension Certifications. The EU-US Data Privacy Framework registry entry, as of 17 Sep 2026, shows an issue date of 4 Sep 2018 and a listed validity through 22 May 2027. No issue date, expiry date or auditor name is disclosed for the SOC 2 or ISO/IEC 27001 statements, as of 18 Sep 2026.","bullets":["Vendor states SOC 2 and ISO/IEC 27001:2022 on its trust centre (vendor-stated, not registry-verified), as of 18 Sep 2026.","Listed in EU-US Data Privacy Framework registry (active), issued 4 Sep 2018, valid through 22 May 2027, as of 17 Sep 2026.","No issue date, expiry date or auditor disclosed for the SOC 2 or ISO/IEC 27001 statements, as of 18 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 12:44:02.965684+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.ceros.com/","availability":"public","detail":"27 subprocessors listed on the trust centre","as_of":"2026-09-18"},{"kind":"privacy","url":"https://www.ceros.com/privacy-policy/","availability":"public","detail":null,"as_of":"2026-09-18"}],"subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud Provider","location":"AWS US East (N. Virginia)","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Anthropic","domain":"anthropic.com","purpose":"AI Service Provider","location":"United States","vendor_url":null},{"name":"appcues","domain":"appcues.com","purpose":"User Tracking and Analytics","location":"Unites States","vendor_url":"https://certreports.com/vendors/appcues/security"},{"name":"ClickUp","domain":"clickup.com","purpose":"Project Management Software","location":"United States","vendor_url":"https://certreports.com/vendors/clickup/security"},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"Content Delivery Network","location":"United States","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Digital Ocean","domain":"digitalocean.com","purpose":"Automated Pilot Signup","location":"United States","vendor_url":"https://certreports.com/vendors/digitalocean/security"},{"name":"Google Cloud (Google Vertex APIs)","domain":"google.com","purpose":"AI Service Provider","location":"United States","vendor_url":null},{"name":"Google Tag Manager","domain":"google.com","purpose":"Tracking User Sign-ons","location":"United States","vendor_url":null},{"name":"Grafana","domain":"grafana.com","purpose":"System Monitoring, AI Traffic Routing and Debugging","location":"United States","vendor_url":"https://certreports.com/vendors/grafana-labs/security"},{"name":"Intercom","domain":"intercom.com","purpose":"Email and Chat Support","location":"United States","vendor_url":"https://certreports.com/vendors/intercom/security"},{"name":"Lacework","domain":"lacework.com","purpose":"Network Security Monitoring","location":"United States","vendor_url":"https://certreports.com/vendors/lacework/security"},{"name":"LogRocket","domain":"logrocket.com","purpose":"User Tracking and Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/logrocket/security"},{"name":"Metronome","domain":"metronome.com","purpose":"Usage-Based Billing","location":"United States","vendor_url":null},{"name":"Mixpanel","domain":"mixpanel.com","purpose":"User Tracking and Analytics","location":"United States","vendor_url":"https://certreports.com/vendors/mixpanel/security"},{"name":"Okta","domain":"okta.com","purpose":"Identity provider","location":"United States","vendor_url":"https://certreports.com/vendors/okta/security"},{"name":"OpenAI","domain":"openai.com","purpose":"AI Services","location":"United States","vendor_url":"https://certreports.com/vendors/openai/security"},{"name":"Openrouter","domain":"openrouter.ai","purpose":"AI Traffic Routing","location":"United States","vendor_url":null},{"name":"Pinecone","domain":"pinecone.io","purpose":"Vector Database","location":"United States","vendor_url":null},{"name":"Postmark","domain":"postmarkapp.com","purpose":"Engineering","location":"United States","vendor_url":null},{"name":"Remove.bg","domain":"remove.bg","purpose":"Image Processing","location":"Austria","vendor_url":null},{"name":"Replicate","domain":"replicate.com","purpose":"AI Image Generation","location":"United States","vendor_url":"https://certreports.com/vendors/replicate/security"},{"name":"Rollbar","domain":"rollbar.com","purpose":"Error Tracking Service","location":"United States","vendor_url":"https://certreports.com/vendors/rollbar/security"},{"name":"Sentry","domain":"sentry.io","purpose":"Cloud monitoring","location":"United States","vendor_url":null},{"name":"Stripe","domain":"stripe.com","purpose":"Payment Processing","location":"United States","vendor_url":"https://certreports.com/vendors/stripe/security"},{"name":"Urlbox","domain":"urlbox.com","purpose":"Website Screenshot Service","location":"United States","vendor_url":null},{"name":"Xara","domain":"xara.com","purpose":"PDF Processing","location":"Germany","vendor_url":null},{"name":"Zencoder","domain":"zencoder.com","purpose":"Video Transcoding","location":"United States","vendor_url":"https://certreports.com/vendors/zencoder/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T06:08:00.411Z"}