{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"datadog","name":"Datadog","domain":"datadoghq.com","category":"DevOps and observability","one_liner":"Datadog is a monitoring service for hybrid cloud applications, assisting organizations in improving agility, increasing efficiency, and","trust_center_url":"https://trust.datadoghq.com/","security_page_url":null,"url":"https://certreports.com/vendors/datadog/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/hipaa","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 17 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/soc-2","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/gdpr","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2026-05-05","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"High","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/datadog/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2023864279A","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Datadog, Inc. - Datadog for Government: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2023864279A","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Datadog, Inc. - Datadog for Government: FedRAMP Authorized","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a PCI DSS attestation of compliance on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states PCI DSS on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/pci-dss","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"PCI DSS","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","issued_at":"2018-04-03","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/datadog/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/datadog","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"datadog: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","confidence":1}]},{"framework":"iso-27701","framework_name":"ISO/IEC 27701","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27701 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27701 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/iso-27701","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"ISO/IEC 27701","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 42001:2023 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/iso-42001","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"ISO/IEC 42001:2023","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"ISO/IEC 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"ISO/IEC 27018:2019","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: UK Extension Certification, EU-US Certification, SW-US Certification","issued_at":"2016-11-15","expires_at":"2027-08-07","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4595","fetched_at":"2026-09-17 15:48:34.491204+00","content_hash":"9b0c3708d187e21721f0f586ecda9adb72abeceb6415dcf984551b63a3ed7b1f","wayback_url":null,"quote":"Datadog, Inc.: Active: UK Extension Certification, EU-US Certification, SW-US Certification","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"CCPA","confidence":1}]},{"framework":"govramp","framework_name":"GovRAMP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an GovRAMP authorization on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states GovRAMP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"GovRAMP","confidence":1}]},{"framework":"tisax","framework_name":"TISAX","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an TISAX assessment label on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states TISAX on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"TISAX","confidence":1}]},{"framework":"irap","framework_name":"IRAP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an IRAP assessment on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states IRAP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/datadog/security","evidence":[{"source_type":"trust_center","source_name":"Datadog trust centre (Drata)","url":"https://trust.datadoghq.com/","fetched_at":"2026-09-17 16:27:48.533899+00","content_hash":"aaacedb86e3a17b4c1d574be847257b58f808abd3fe43dcc5c35aa7a6a39160a","wayback_url":null,"quote":"IRAP","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Datadog states on its trust centre that it holds SOC 2 Type II, and as of 17 Sep 2026 shows a HIPAA badge on its trust centre, though BAA availability is not yet captured. As of 17 Sep 2026, Datadog is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 5 May 2026 and audited by Schellman Compliance, LLC. As of 17 Sep 2026, Datadog is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) originally issued 3 Apr 2018, and is listed in the EU-US Data Privacy Framework registry as active, originally certified 15 Nov 2016 with an expiry of 7 Aug 2027. As of 17 Sep 2026, Datadog states on its trust centre that it holds ISO/IEC 27001, 27701, 27017, 27018, and 42001:2023, as well as GDPR, PCI DSS, CCPA, GovRAMP, TISAX, and IRAP. No public evidence found for any additional frameworks beyond those listed as of 17 Sep 2026.","bullets":["SOC 2: vendor states on its trust centre it holds SOC 2 Type II (as of 17 Sep 2026); HIPAA: vendor displays a HIPAA badge on its trust centre, BAA availability not yet captured (as of 17 Sep 2026).","FedRAMP: listed in FedRAMP registry as FedRAMP Authorized, issued 5 May 2026, auditor Schellman Compliance, LLC (as of 17 Sep 2026).","CSA STAR: listed in CSA STAR registry, Level 1 self-assessment (CAIQ) issued 3 Apr 2018; EU-US Data Privacy Framework: listed in DPF registry as active, issued 15 Nov 2016, expires 7 Aug 2027 (as of 17 Sep 2026)."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:33:19.383318+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.datadoghq.com/","availability":"public","detail":"14 subprocessors listed on the trust centre","as_of":"2026-09-17"}],"subprocessors":[{"name":"A Trust Center Updates Subscribe Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Bits AI chat notification Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Check your notification history within Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Crashlytics setUserId propagates the Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Datadog Support . Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Next Steps for Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"One Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Policies and Procedures Acceptable Use Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Status Monitoring Amazon Web Services Azure","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Support team is here to help. Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"UUID to Google","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Vulnerabilities Summary Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"We confirmed that Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"What Datadog","domain":null,"purpose":null,"location":null,"vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:21:27.632Z"}