{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"island","name":"Island","domain":"island.io","category":"Security","one_liner":"Govern human and AI workflows with Island’s Enterprise Agentic Control","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/island/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"listing","status_text":"Agency In Process","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","impact_level":"High","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/island/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2614439182","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"Island - Island Enterprise Platform: Agency In Process","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2614439182","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Island - Island Enterprise Platform: Agency In Process","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2614439182","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Island - Island Enterprise Platform: Agency In Process","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2026-07-10","expires_at":"2027-07-10","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/island/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/10204","fetched_at":"2026-09-17 15:51:31.892719+00","content_hash":"6c1fedc7e5ecb02d51dd4a0c0e02f33b6988ee60c49ef6333d871f03b3fba278","wayback_url":null,"quote":"Island Technology, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Island is listed in the FedRAMP registry with a status of 'Agency In Process', with A-LIGN Compliance and Security, Inc. dba A-LIGN named as auditor. As of 17 Sep 2026, Island is listed in the EU-US Data Privacy Framework registry with an active status covering EU-US Certification, SW-US Certification, and UK Extension Certification, issued 10 Jul 2026 and expiring 10 Jul 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for Island. As of 17 Sep 2026, no public evidence found for HIPAA for Island. As of 17 Sep 2026, no subprocessor evidence entries were found in the supplied rows for Island.","bullets":["FedRAMP: listed in FedRAMP registry, status 'Agency In Process', auditor A-LIGN Compliance and Security, Inc. dba A-LIGN, as of 17 Sep 2026","EU-US Data Privacy Framework: listed in DPF registry, active (EU-US, SW-US, UK Extension), issued 10 Jul 2026, expires 10 Jul 2027, as of 17 Sep 2026","SOC 2 and HIPAA: no public evidence found, as of 17 Sep 2026"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:43:06.504874+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T09:12:40.371Z"}