{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"granicus","name":"Granicus","domain":"granicus.com","category":"Government and public sector","one_liner":"Citizen Experience Platform Transforming How Governments","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/granicus/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2016-04-08","expires_at":null,"period_start":null,"period_end":null,"auditor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/granicus/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1311252652","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Granicus - GovDelivery Communications Cloud: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1311252652","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Granicus - GovDelivery Communications Cloud: FedRAMP Authorized","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification","issued_at":"2017-05-16","expires_at":"2027-01-15","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/granicus/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4736","fetched_at":"2026-09-17 15:48:38.504394+00","content_hash":"40f09cdbfb324548c8980fa4fa0490937b2fcbd6a50d28fa3d8e33bab84d49be","wayback_url":null,"quote":"Granicus: Active: EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Granicus is listed in the FedRAMP registry as FedRAMP Authorized, with an authorization issued 08 Apr 2016 and no expiration date recorded, audited by A-LIGN Compliance and Security, Inc. dba A-LIGN. As of 17 Sep 2026, Granicus is listed in the EU-US Data Privacy Framework registry as Active, covering both the EU-US Certification and UK Extension Certification, issued 16 May 2017 and expiring 15 Jan 2027. As of 17 Sep 2026, no public evidence found for SOC 2. As of 17 Sep 2026, no public evidence found for HIPAA. As of 17 Sep 2026, no public evidence found regarding subprocessors beyond a listed count of zero.","bullets":["FedRAMP: listed in fedramp registry as FedRAMP Authorized, issued 08 Apr 2016, no expiration date, audited by A-LIGN Compliance and Security, Inc. dba A-LIGN (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in dpf registry as Active (EU-US Certification, UK Extension Certification), issued 16 May 2017, expires 15 Jan 2027 (as of 17 Sep 2026)","SOC 2 and HIPAA: no public evidence found (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:57:37.201406+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:21:53.374Z"}