{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"expedient","name":"Expedient","domain":"expedient.com","category":"DevOps and observability","one_liner":"Expedient combines data centers, network access and managed services to deliver information technology infrastructure as a service (IaaS)","trust_center_url":"https://trust.expedient.com/","security_page_url":null,"url":"https://certreports.com/vendors/expedient/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2026-10-31","issued_at":"2015-10-15","expires_at":"2026-10-31","period_start":null,"period_end":null,"auditor":"Coalfire Systems, Inc","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/expedient/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:46.721384+00","content_hash":"2e5b866d8fb733ff07b18b248cb9856ef32556cbbad1fb4ad6ff7222084e4cd4","wayback_url":null,"quote":"Expedient: PCI DSS, assessor Coalfire Systems, Inc, valid through 2026-10-31","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2019-10-14","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/expedient/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/expedient","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"expedient: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: UK Extension Certification, EU-US Certification, SW-US Certification","issued_at":"2016-12-06","expires_at":"2027-03-18","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/expedient/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/8441","fetched_at":"2026-09-17 15:50:35.411942+00","content_hash":"2d2501e89b81ee0fa3a46cc73b2b8dd80376238d1562807d0711437dd78b37c8","wayback_url":null,"quote":"Expedient: Active: UK Extension Certification, EU-US Certification, SW-US Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Expedient is listed on the Visa Global Registry as PCI DSS validated through 31 Oct 2026, with the assessment originally issued 15 Oct 2015 and audited by Coalfire Systems, Inc. As of 17 Sep 2026, Expedient is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) dated 14 Oct 2019, with no expiry date provided. As of 17 Sep 2026, Expedient is listed in the EU-US Data Privacy Framework registry as active, covering the UK Extension Certification, EU-US Certification, and Swiss-US Certification, with the current certification period running from 6 Dec 2016 to 18 Mar 2027. No public evidence found for a SOC 2 Type II report as of 17 Sep 2026. No public evidence found regarding HIPAA or a BAA offering as of 17 Sep 2026.","bullets":["PCI DSS: listed on the Visa Global Registry as validated through 31 Oct 2026 (issued 15 Oct 2015, auditor Coalfire Systems, Inc), as of 17 Sep 2026.","CSA STAR: listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) dated 14 Oct 2019, no expiry date given, as of 17 Sep 2026.","EU-US Data Privacy Framework: listed as active (EU-US, UK Extension, Swiss-US Certifications) with certification period 6 Dec 2016 to 18 Mar 2027, as of 17 Sep 2026."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:40:41.135094+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T06:08:06.424Z"}