{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"cgi","name":"CGI","domain":"cgi.com","category":"Business services","one_liner":null,"trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/cgi/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 17 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2023-11-06","expires_at":null,"period_start":null,"period_end":null,"auditor":"Kratos","impact_level":"Moderate","as_of":"2026-09-17","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/cgi/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2018946952","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"CGI Federal - Sunflower Asset Management Cloud (SAMC): FedRAMP Authorized","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-07-31","issued_at":"2017-11-29","expires_at":"2027-07-31","period_start":null,"period_end":null,"auditor":"Foregenix Ltd.","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/cgi/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:23.850678+00","content_hash":"31821b19d0827aef0c02b945db61e845ca7e3fc428b0ddab8d647a9c719ae7a2","wayback_url":null,"quote":"CGI Suomi Oy: PCI DSS, assessor Foregenix Ltd., valid through 2027-07-31","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification, SW-US Certification","issued_at":"2024-01-08","expires_at":"2026-12-08","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/cgi/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5822","fetched_at":"2026-09-17 15:49:11.05688+00","content_hash":"e737fa89f2cff3161bb5a5f4518a4619326f5d7c2bf5518cc2ded80d22fc67ab","wayback_url":null,"quote":"CGI: Active: EU-US Certification, UK Extension Certification, SW-US Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, CGI is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 06 Nov 2023 and audited by Kratos. As of 17 Sep 2026, CGI is listed in the Visa Global Registry as PCI DSS validated, with validation issued 29 Nov 2017 by Foregenix Ltd. and effective through 31 Jul 2027. As of 17 Sep 2026, CGI is listed in the EU-US Data Privacy Framework registry as holding Active EU-US Certification, UK Extension Certification, and Swiss-US Certification, issued 08 Jan 2024 and expiring 08 Dec 2026. No public evidence found for SOC 2 or ISO 27001 frameworks as of 17 Sep 2026. No public evidence found regarding HIPAA or a BAA offering as of 17 Sep 2026.","bullets":["FedRAMP: Listed in FedRAMP registry as FedRAMP Authorized, issued 06 Nov 2023, audited by Kratos (as of 17 Sep 2026)","PCI DSS: Listed in Visa Global Registry as PCI DSS validated, issued 29 Nov 2017, expires 31 Jul 2027 (as of 17 Sep 2026)","EU-US Data Privacy Framework: Listed in DPF registry as Active (EU-US, UK Extension, Swiss-US Certifications), issued 08 Jan 2024, expires 08 Dec 2026 (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:39:27.885731+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-18T16:33:12.311Z"}