{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"diligent","name":"Diligent","domain":"diligent.com","category":"Compliance and GRC","one_liner":null,"trust_center_url":"https://trust.diligent.com/","security_page_url":null,"url":"https://certreports.com/vendors/diligent/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/hipaa","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/soc-2","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/gdpr","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2019-11-20","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/diligent/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1834172478","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Diligent, Inc. - Diligent One Platform (D1P): FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1834172478","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Diligent, Inc. - Diligent One Platform (D1P): FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1}]},{"framework":"soc-1","framework_name":"SOC 1","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 1 Type II report on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states SOC 1 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"SOC 1","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"ISO/IEC 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"ISO/IEC 27018:2019","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: UK Extension Certification, EU-US Certification, SW-US Certification","issued_at":"2016-10-20","expires_at":"2026-12-29","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5472","fetched_at":"2026-09-17 15:49:00.548572+00","content_hash":"5aadedbfaa2cc59d971733d07854c652b99e43da00760cd6edf57db7791c4505","wayback_url":null,"quote":"Diligent Corporation: Active: UK Extension Certification, EU-US Certification, SW-US Certification","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"CCPA","confidence":1}]},{"framework":"txramp","framework_name":"TX-RAMP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an TX-RAMP certification on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states TX-RAMP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"TX-RAMP","confidence":1}]},{"framework":"irap","framework_name":"IRAP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an IRAP assessment on its trust centre (Drata) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states IRAP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"drata","url":"https://certreports.com/vendors/diligent/security","evidence":[{"source_type":"trust_center","source_name":"Diligent trust centre (Drata)","url":"https://trust.diligent.com/","fetched_at":"2026-09-17 16:28:17.257123+00","content_hash":"ee56e96ee93a07ab5b7949a1bec7a4b0a45e1667059bcdf8fdb243d32bdadee5","wayback_url":null,"quote":"IRAP","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Diligent is listed in the FedRAMP registry as FedRAMP Authorized, with authorization dated 20 Nov 2019 and audit work performed by Schellman Compliance, LLC. As of 17 Sep 2026, Diligent is listed in the EU-US Data Privacy Framework registry as active across the UK Extension, EU-US, and SW-US Certifications, with an original certification date of 20 Oct 2016 and an expiration date of 29 Dec 2026. As of 17 Sep 2026, Diligent states on its trust centre that it holds SOC 1, SOC 2, ISO/IEC 27001, ISO/IEC 27017:2015, ISO/IEC 27018:2019, GDPR, CCPA, TX-RAMP, and IRAP, though these are vendor statements rather than registry-verified records. As of 17 Sep 2026, Diligent displays a HIPAA badge on its trust centre, but BAA availability has not yet been captured, so it cannot be confirmed whether Diligent offers a BAA. No public evidence found for any additional frameworks beyond those listed above as of 17 Sep 2026.","bullets":["FedRAMP: listed in FedRAMP registry as Authorized (issued 20 Nov 2019, auditor Schellman Compliance, LLC) as of 17 Sep 2026.","EU-US Data Privacy Framework: listed in DPF registry as active (UK Extension, EU-US, SW-US Certifications), issued 20 Oct 2016, expires 29 Dec 2026, as of 17 Sep 2026.","HIPAA: vendor displays a HIPAA badge on its trust centre as of 17 Sep 2026, but BAA availability is not yet captured; SOC 2, SOC 1, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, GDPR, CCPA, TX-RAMP, and IRAP are all vendor-stated on its trust centre as of 17 Sep 2026."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:34:14.814685+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-18T23:23:50.509Z"}