{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"expo","name":"Expo","domain":"expopass.com","category":null,"one_liner":"Expo Pass is an all-in-one event management platform: online registration, on-site badge printing, check-in, lead retrieval, and a mobile","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/expo/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 17 Sep 2026.","kind":"listing","status_text":"Inactive","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/expo/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/3829","fetched_at":"2026-09-17 15:48:12.952837+00","content_hash":"ce44eed135f7a621df778bb2114cccb25d5949d9bd6256cbd2bfaed5bbe54a7d","wayback_url":null,"quote":"Expo, Inc.: Inactive","confidence":1}]}],"brief":{"summary":"Expo's EU-US Data Privacy Framework listing is marked inactive as of 17 Sep 2026, based on a single registry evidence record, and this evidence row carries no recorded issue date, expiration date, or period end date. No public evidence found for SOC 2, meaning no SOC 2 Type II report or vendor statement of SOC 2 was recorded in the reviewed evidence. No public evidence found for ISO/IEC 27001 or ISO/IEC 27701 certification. No public evidence found for FedRAMP authorization or CSA STAR registry listing. No public evidence found for HIPAA, GDPR, or PCI DSS.","bullets":["EU-US Data Privacy Framework: listing inactive as of 17 Sep 2026; no issue or expiration date recorded","No public evidence found for SOC 2 or ISO/IEC 27001","No public evidence found for FedRAMP, HIPAA, or PCI DSS"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:31:30.526255+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T04:22:14.889Z"}