{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"databricks","name":"Databricks","domain":"databricks.com","category":"Data platforms","one_liner":null,"trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/databricks/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 17 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2026-01-16","expires_at":null,"period_start":null,"period_end":null,"auditor":"Fortreum, LLC","impact_level":"High","as_of":"2026-09-17","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/databricks/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2525247858","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Databricks, Inc. - Databricks on Azure Commercial: FedRAMP Authorized","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: UK Extension Certification, EU-US Certification, SW-US Certification","issued_at":"2018-09-04","expires_at":"2027-08-10","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/databricks/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4569","fetched_at":"2026-09-17 15:48:33.717007+00","content_hash":"c01e3494d5e2bc8640844ffab1f591d79d04e450a6e68e53b8a5e6efc6c0f9a3","wayback_url":null,"quote":"Databricks, Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Databricks is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 16 Jan 2026 and audited by Fortreum, LLC. As of 17 Sep 2026, Databricks is listed in the EU-US Data Privacy Framework registry as Active, covering UK Extension, EU-US, and SW-US Certifications, originally issued 4 Sep 2018 and set to expire 10 Aug 2027. As of 17 Sep 2026, no expiration date is listed for the FedRAMP authorization. As of 17 Sep 2026, no public evidence found for SOC 2 or HIPAA frameworks for Databricks. As of 17 Sep 2026, no subprocessor evidence rows were found in the supplied data.","bullets":["FedRAMP: listed in FedRAMP registry as FedRAMP Authorized, issued 16 Jan 2026, auditor Fortreum, LLC (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in DPF registry as Active (UK Extension, EU-US, SW-US Certifications), issued 4 Sep 2018, expires 10 Aug 2027 (as of 17 Sep 2026)","SOC 2 and HIPAA: no public evidence found (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:43:01.634949+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-18T16:34:17.508Z"}