{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"elementary","name":"Elementary","domain":"elementary-data.com","category":"DevOps and observability","one_liner":"Open-source data observability for data teams","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/elementary/security","last_verified_at":"2026-10-26T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 26 Oct 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2024-10-25","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-10-26","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/elementary/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/elementary","fetched_at":"2026-10-26 05:00:05.217959+00","content_hash":"0c3d16dcbd77d639d256c2f5de5eac7c995deb3d9c8ecb697f3919e064cfa0fd","wayback_url":null,"quote":"elementary: STAR Level 1 self-assessment (CAIQ)","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/elementary","fetched_at":"2026-10-19 05:00:04.207159+00","content_hash":"6ebb0150315154b32c59fd3d2a81bb4bc4a9c9dabf7b485b5276104bdf852acb","wayback_url":null,"quote":"elementary: STAR Level 1 self-assessment (CAIQ)","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/elementary","fetched_at":"2026-10-12 05:00:04.718981+00","content_hash":"be2cb50e52128b9a1c5b016c9a48d1831b9215e7effe345b5df6a034ef5f2e29","wayback_url":null,"quote":"elementary: STAR Level 1 self-assessment (CAIQ)","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/elementary","fetched_at":"2026-10-05 05:00:04.451025+00","content_hash":"3b3fda577efc5eb9a00af6a8040caf609c1fc2a294d846b2dcab0e8c2303b261","wayback_url":null,"quote":"elementary: STAR Level 1 self-assessment (CAIQ)","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/elementary","fetched_at":"2026-09-29 03:46:22.312905+00","content_hash":"aadfa82b54b7f12b294435b40c81a3cac63c4874bc052d39b123e12485fa29d0","wayback_url":null,"quote":"elementary: STAR Level 1 self-assessment (CAIQ)","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/elementary","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"elementary: STAR Level 1 self-assessment (CAIQ)","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Elementary is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ). The registry shows an issue date of 25 Oct 2024 and does not record an expiration date. No other frameworks appear in the supplied evidence for Elementary. No public evidence was found for SOC 2, ISO/IEC 27001, FedRAMP, PCI DSS, or the EU-US Data Privacy Framework. The CSA STAR listing is the only compliance evidence found for Elementary as of 17 Sep 2026.","bullets":["CSA STAR: listed in the registry with a Level 1 self-assessment (CAIQ), issued 25 Oct 2024, as of 17 Sep 2026.","CSA STAR: no expiration date recorded in the registry.","No public evidence found for SOC 2, ISO/IEC 27001, FedRAMP, PCI DSS, or EU-US Data Privacy Framework."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-25 10:24:56.539435+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/elementary/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-04T00:15:36.613Z"}