{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"coalesce","name":"Coalesce","domain":"coalesce.io","category":"Data platforms","one_liner":"Coalesce is the data operating layer where humans and AI agents build, govern, and observe data together, in one governed","trust_center_url":"https://trust.coalesce.io/","security_page_url":null,"url":"https://certreports.com/vendors/coalesce/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/coalesce/soc-2","evidence":[{"source_type":"trust_center","source_name":"Coalesce trust centre (Vanta)","url":"https://trust.coalesce.io/","fetched_at":"2026-09-18 23:07:04.127169+00","content_hash":"ec950954bc61b1d944e83ff578d85756c12af214548cd043125e51c6f0885072","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/coalesce/gdpr","evidence":[{"source_type":"trust_center","source_name":"Coalesce trust centre (Vanta)","url":"https://trust.coalesce.io/","fetched_at":"2026-09-18 23:07:04.127169+00","content_hash":"ec950954bc61b1d944e83ff578d85756c12af214548cd043125e51c6f0885072","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/coalesce/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Coalesce trust centre (Vanta)","url":"https://trust.coalesce.io/","fetched_at":"2026-09-18 23:07:04.127169+00","content_hash":"ec950954bc61b1d944e83ff578d85756c12af214548cd043125e51c6f0885072","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification","issued_at":"2024-12-24","expires_at":"2026-12-03","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/coalesce/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/9250","fetched_at":"2026-09-17 15:50:58.54098+00","content_hash":"0ae0b55cae2db17f2a0fa58da3c0d5f095902632f5662c96d0c03ae5a1b9fdab","wayback_url":null,"quote":"Coalesce: Active: EU-US Certification","confidence":1}]}],"brief":null,"legal_docs":[{"kind":"privacy","url":"https://coalesce.io/privacy-policy/","availability":"public","detail":null,"as_of":"2026-09-18"},{"kind":"subprocessors","url":"https://trust.coalesce.io/","availability":"public","detail":"13 subprocessors listed on the trust centre","as_of":"2026-09-18"}],"subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Hosting","location":"Global","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Atlassian","domain":"atlassian.com","purpose":"Collaboration","location":"Global","vendor_url":"https://certreports.com/vendors/atlassian/security"},{"name":"Estuary","domain":"estuary.dev","purpose":"Data Integration","location":null,"vendor_url":null},{"name":"Fivetran","domain":"fivetran.com","purpose":"Data Integration","location":"Global","vendor_url":"https://certreports.com/vendors/fivetran/security"},{"name":"Gong","domain":"gong.io","purpose":"Customer Support","location":"Global","vendor_url":null},{"name":"Google Cloud Platform","domain":"google.com","purpose":"Cloud Provider","location":"Global","vendor_url":null},{"name":"Google Workspace","domain":"google.com","purpose":"Identity Provider","location":"Global","vendor_url":null},{"name":"Hightouch","domain":"hightouch.com","purpose":"Data Integration","location":"Global","vendor_url":"https://certreports.com/vendors/hightouch/security"},{"name":"Pagerduty Inc","domain":"pagerduty.com","purpose":"Customer Support","location":"Global","vendor_url":"https://certreports.com/vendors/pagerduty/security"},{"name":"Salesforce","domain":"salesforce.com","purpose":"CRM","location":"Global","vendor_url":null},{"name":"Sigma Computing","domain":"sigmacomputing.com","purpose":"Analytics","location":"Global","vendor_url":"https://certreports.com/vendors/sigma-computing/security"},{"name":"Slack","domain":"slack.com","purpose":"Messaging Integration","location":"Global","vendor_url":"https://certreports.com/vendors/slack-technologies/security"},{"name":"Snowflake","domain":"snowflake.com","purpose":"Hosting and Data Storage","location":"Global","vendor_url":"https://certreports.com/vendors/snowflake/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T00:22:22.680Z"}