{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"contentstack","name":"Contentstack","domain":"contentstack.com","category":null,"one_liner":"Contentstack's AXP unites Content Cloud, Data Cloud, and Agent OS to cut operational debt and power hyper-personalized digital","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/contentstack/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2023-07-17","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/contentstack/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5350","fetched_at":"2026-11-02 05:02:09.620088+00","content_hash":"38dd25059534f4f5cd0941445363030e528f78e9d010520f129882d18c3e9d3f","wayback_url":null,"quote":"Contentstack Inc.: Inactive","confidence":1}]}],"brief":{"summary":"Contentstack shows a single evidence record under the EU-US Data Privacy Framework, where its certification status is listed as expired, having been issued on 17 Jul 2023 and marked inactive as of 02 Nov 2026. No public evidence found for a SOC 2 Type II report as of 02 Nov 2026, meaning no corresponding documentation has been located for this vendor's SOC 2 status. No public evidence found for ISO/IEC 27001 as of 02 Nov 2026, so no certification details are currently available for review. No public evidence found for PCI DSS as of 02 Nov 2026, leaving card payment compliance unconfirmed. No public evidence found for HIPAA as of 02 Nov 2026, meaning no BAA statement has been identified.","bullets":["EU-US Data Privacy Framework: expired, issued 17 Jul 2023, inactive as of 02 Nov 2026","SOC 2: no public evidence found as of 02 Nov 2026","ISO/IEC 27001: no public evidence found as of 02 Nov 2026"],"model":"claude-sonnet-5","generated_at":"2026-11-02 05:34:19.907584+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/contentstack/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:20:17.760Z"}