{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"liferay","name":"Liferay","domain":"liferay.com","category":"No-code and automation","one_liner":"Liferay helps organizations solve digital challenges with omnichannel intranet, portal, commerce, and integration","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/liferay/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"third_party","state_label":"Reported","sentence":"Reported by the CSA STAR registry as of 17 Sep 2026, not confirmed.","kind":"type2","status_text":"CSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination","issued_at":"2020-11-23","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/liferay/soc-2","evidence":[{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"level2","status_text":"STAR Level 2 attestation, Trusted Cloud Provider","issued_at":"2020-11-23","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/liferay/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2017-01-05","expires_at":"2027-01-27","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/liferay/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4361","fetched_at":"2026-09-17 15:48:27.795701+00","content_hash":"2ac8a9101a57b8877eb6cd736046743b7dc14ce3230df0e9a8fe693006cd55e2","wayback_url":null,"quote":"Liferay, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":null,"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T00:22:38.005Z"}