{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"h1","name":"H1","domain":"h1.co","category":"Healthcare","one_liner":"Connecting stakeholders across the healthcare ecosystem.","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/h1/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2020-05-12","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/h1/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6978","fetched_at":"2026-11-02 05:02:48.697239+00","content_hash":"5f467204e5847147fd07b7cc0ff519374831e4eb9da1ed91440a93cb6b99c189","wayback_url":null,"quote":"H1: Inactive","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, the EU-US Data Privacy Framework registry lists H1's certification status as Inactive. The listing was originally issued 12 May 2020, and the EU-US Data Privacy Framework registry shows no active certification as of 17 Sep 2026. As of 17 Sep 2026, no public evidence was found for a SOC 2 Type II report for H1. As of 17 Sep 2026, no public evidence was found for ISO 27001 certification for H1. As of 17 Sep 2026, no public evidence was found for a HIPAA BAA offered by H1.","bullets":["EU-US Data Privacy Framework: status Inactive, originally issued 12 May 2020 (as of 17 Sep 2026)","HIPAA: no public evidence of a BAA offering found (as of 17 Sep 2026)","SOC 2 Type II: no public evidence found (as of 17 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-26 09:59:01.034143+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/h1/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T18:40:31.918Z"}