{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"confluent","name":"Confluent","domain":"confluent.io","category":"Data platforms","one_liner":null,"trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/confluent/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"third_party","state_label":"Reported","sentence":"Reported by the CSA STAR registry as of 17 Sep 2026, not confirmed.","kind":"type2","status_text":"CSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination","issued_at":"2020-08-12","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/confluent/soc-2","evidence":[{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/confluent-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"confluent, inc.: STAR Level 2 attestation","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2026-03-06","expires_at":null,"period_start":null,"period_end":null,"auditor":"Fortreum, LLC","impact_level":"20x Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/confluent/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2409863458XL","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Confluent - Confluent Cloud for Government (CCG): FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2409863458XL","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Confluent - Confluent Cloud for Government (CCG): FedRAMP Authorized","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-01-31","issued_at":"2021-08-11","expires_at":"2027-01-31","period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC.","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/confluent/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:28.227109+00","content_hash":"ee3b742fa4f884262e07791d3616cc752d963b9ef1b9e03e3b41ad683e4d4379","wayback_url":null,"quote":"Confluent, Inc.: PCI DSS, assessor Schellman Compliance, LLC., valid through 2027-01-31","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"level2","status_text":"STAR Level 2 attestation","issued_at":"2020-08-12","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/confluent/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/confluent-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"confluent, inc.: STAR Level 2 attestation","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2025-10-06","expires_at":"2026-10-06","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/confluent/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/9688","fetched_at":"2026-09-17 15:51:15.864443+00","content_hash":"9bd573864379bfa28da2828434fe3e8d5d6530a290c822e769a434a359b1c127","wayback_url":null,"quote":"CONFLUENT, INC.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Confluent is listed in the CSA STAR registry with a Level 2 attestation issued 12 Aug 2020, which the registry states is built on a SOC 2 examination. As of 17 Sep 2026, Confluent is listed in the FedRAMP registry as FedRAMP Authorized, with authorization dated 6 Mar 2026 and audited by Fortreum, LLC. As of 17 Sep 2026, Confluent is listed on the Visa Global Registry as PCI DSS validated, with validation issued 11 Aug 2021 by Schellman Compliance, LLC. and stated to run through 31 Jan 2027. As of 17 Sep 2026, Confluent is listed in the EU-US Data Privacy Framework registry with active EU-US, SW-US, and UK Extension certifications issued 6 Oct 2025 and expiring 6 Oct 2026. No public evidence found for a HIPAA BAA as of 17 Sep 2026.","bullets":["Listed in CSA STAR registry: Level 2 attestation (built on a SOC 2 examination), issued 12 Aug 2020, as of 17 Sep 2026","Listed in FedRAMP registry: FedRAMP Authorized, issued 6 Mar 2026, auditor Fortreum, LLC, as of 17 Sep 2026","Listed in Visa Global Registry: PCI DSS validated through 31 Jan 2027, issued 11 Aug 2021 by Schellman Compliance, LLC., as of 17 Sep 2026"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:35:53.696472+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-18T23:24:51.792Z"}