{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"hex","name":"Hex","domain":"hex.tech","category":"Analytics","one_liner":"Finally — anyone can get data insights grounded in the facts of their","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/hex/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2023-10-26","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/hex/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6049","fetched_at":"2026-11-02 05:02:26.534334+00","content_hash":"8e76b72474aa21e5f48585e9d0ce0c026fb30db9e333dd62cc6b53299c305d4c","wayback_url":null,"quote":"Hex: Inactive","confidence":1}]}],"brief":{"summary":"Hex's EU-US Data Privacy Framework certification listing is marked Inactive on the DPF registry, as of 17 Sep 2026. The Data Privacy Framework certification was originally issued 26 Oct 2023 and its registry entry shows no active expiry date, having since expired, as of 17 Sep 2026. For FedRAMP, no public evidence found in the FedRAMP Marketplace, as of 19 Sep 2026. For CSA STAR, no public evidence found in the CSA STAR registry, as of 17 Sep 2026. For PCI DSS, no public evidence found on the Visa Global Registry of Service Providers, as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework - expired/inactive listing, originally issued 26 Oct 2023; as of 17 Sep 2026.","FedRAMP - no public evidence found, as of 19 Sep 2026.","CSA STAR and PCI DSS - no public evidence found, as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:14:54.487159+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/hex/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:19:18.281Z"}