{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"evervault","name":"Evervault","domain":"evervault.com","category":"Security","one_liner":"Evervault specializes in data encryption and confidential computing, helping customers address data security and compliance across various","trust_center_url":"https://trust.evervault.com/","security_page_url":null,"url":"https://certreports.com/vendors/evervault/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/evervault/hipaa","evidence":[{"source_type":"trust_center","source_name":"Evervault trust centre (Vanta)","url":"https://trust.evervault.com/","fetched_at":"2026-09-18 23:08:29.803501+00","content_hash":"25092102daaf1ea16421c879e9e45a1569188791565be5f596536c11cf0d9dcd","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/evervault/soc-2","evidence":[{"source_type":"trust_center","source_name":"Evervault trust centre (Vanta)","url":"https://trust.evervault.com/","fetched_at":"2026-09-18 23:08:29.803501+00","content_hash":"25092102daaf1ea16421c879e9e45a1569188791565be5f596536c11cf0d9dcd","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/evervault/gdpr","evidence":[{"source_type":"trust_center","source_name":"Evervault trust centre (Vanta)","url":"https://trust.evervault.com/","fetched_at":"2026-09-18 23:08:29.803501+00","content_hash":"25092102daaf1ea16421c879e9e45a1569188791565be5f596536c11cf0d9dcd","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-07-31","issued_at":"2022-01-05","expires_at":"2027-07-31","period_start":null,"period_end":null,"auditor":"Prescient Security, LLC","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/evervault/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:46.121925+00","content_hash":"f19f526ae9904f044c50e1d56350347c36a7648ad795c2b66772b8cc0379f63b","wayback_url":null,"quote":"Evervault Inc.: PCI DSS, assessor Prescient Security, LLC, valid through 2027-07-31","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2024-01-03","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/evervault/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/evervault","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"evervault: STAR Level 1 self-assessment (CAIQ)","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, PCI DSS status for Evervault is listed in the Visa Global Registry, validated through 31 Jul 2027, with the audit conducted by Prescient Security, LLC. As of 17 Sep 2026, CSA STAR status is listed in the registry as a Level 1 self-assessment (CAIQ) dated 3 Jan 2024, with no expiry date provided. As of 17 Sep 2026, no public evidence found for SOC 2 for Evervault. As of 17 Sep 2026, no public evidence found for HIPAA for Evervault. As of 17 Sep 2026, no subprocessor entries were found in the evidence provided for Evervault.","bullets":["PCI DSS: listed in Visa Global Registry, validated through 31 Jul 2027, auditor Prescient Security, LLC (as of 17 Sep 2026).","CSA STAR: listed in registry, Level 1 self-assessment (CAIQ), issued 3 Jan 2024, no expiry date (as of 17 Sep 2026).","SOC 2 and HIPAA: no public evidence found (as of 17 Sep 2026)."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:56:33.757176+00"},"legal_docs":[{"kind":"privacy","url":"https://evervault.com/legal/privacy","availability":"public","detail":null,"as_of":"2026-09-18"},{"kind":"subprocessors","url":"https://trust.evervault.com/","availability":"public","detail":"14 subprocessors listed on the trust centre","as_of":"2026-09-18"}],"subprocessors":[{"name":"3DSecure.io","domain":"3dsecure.io","purpose":"Failover provider for 3D-Secure authentications","location":"EU","vendor_url":null},{"name":"Alguna","domain":"alguna.io","purpose":"Invoicing","location":"US","vendor_url":null},{"name":"Amazon Web Services","domain":"amazon.com","purpose":null,"location":"US East, EU West","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Auth0","domain":"auth0.com","purpose":null,"location":"US","vendor_url":null},{"name":"Clone Systems","domain":"clone-systems.com","purpose":"Vulnerability Scanning","location":"EU","vendor_url":null},{"name":"Cloudflare","domain":"cloudflare.com","purpose":null,"location":"US, Global","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Datadog","domain":"datadoghq.com","purpose":"Cloud monitoring","location":"US","vendor_url":"https://certreports.com/vendors/datadog/security"},{"name":"Evervault Inc. (USA)","domain":"evervault.com","purpose":"Engineering and support personnel ","location":"US","vendor_url":"https://certreports.com/vendors/evervault/security"},{"name":"GitHub","domain":"github.com","purpose":"Version control","location":"US, EU","vendor_url":null},{"name":"Google Workspace","domain":"google.com","purpose":null,"location":"US, EU","vendor_url":null},{"name":"Hubspot","domain":"hubspot.com","purpose":"Marketing","location":"US, EU","vendor_url":"https://certreports.com/vendors/hubspot/security"},{"name":"SendGrid","domain":"sendgrid.com","purpose":"Email Service","location":"US, EU","vendor_url":"https://certreports.com/vendors/sendgrid/security"},{"name":"Vercel","domain":"vercel.com","purpose":"Cloud provider","location":"US","vendor_url":"https://certreports.com/vendors/vercel/security"},{"name":"Visa Acceptance Solutions","domain":"visaacceptance.com","purpose":"Payments Services","location":"US, EU","vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T03:30:45.765Z"}