{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"liferay","name":"Liferay","domain":"liferay.com","category":"E-commerce","one_liner":"Liferay helps organizations solve digital challenges with omnichannel intranet, portal, commerce, and integration","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/liferay/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"third_party","state_label":"Reported","sentence":"Reported by the CSA STAR registry as of 26 Oct 2026, not confirmed.","kind":"type2","status_text":"CSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination","issued_at":"2020-11-23","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-10-26","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/liferay/soc-2","evidence":[{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-26 05:00:05.217959+00","content_hash":"0c3d16dcbd77d639d256c2f5de5eac7c995deb3d9c8ecb697f3919e064cfa0fd","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-19 05:00:04.207159+00","content_hash":"6ebb0150315154b32c59fd3d2a81bb4bc4a9c9dabf7b485b5276104bdf852acb","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-12 05:00:04.718981+00","content_hash":"be2cb50e52128b9a1c5b016c9a48d1831b9215e7effe345b5df6a034ef5f2e29","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-05 05:00:04.451025+00","content_hash":"3b3fda577efc5eb9a00af6a8040caf609c1fc2a294d846b2dcab0e8c2303b261","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-09-29 03:46:22.312905+00","content_hash":"aadfa82b54b7f12b294435b40c81a3cac63c4874bc052d39b123e12485fa29d0","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 26 Oct 2026.","kind":"level2","status_text":"STAR Level 2 attestation, Trusted Cloud Provider","issued_at":"2020-11-23","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-10-26","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/liferay/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-26 05:00:05.217959+00","content_hash":"0c3d16dcbd77d639d256c2f5de5eac7c995deb3d9c8ecb697f3919e064cfa0fd","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-19 05:00:04.207159+00","content_hash":"6ebb0150315154b32c59fd3d2a81bb4bc4a9c9dabf7b485b5276104bdf852acb","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-12 05:00:04.718981+00","content_hash":"be2cb50e52128b9a1c5b016c9a48d1831b9215e7effe345b5df6a034ef5f2e29","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-10-05 05:00:04.451025+00","content_hash":"3b3fda577efc5eb9a00af6a8040caf609c1fc2a294d846b2dcab0e8c2303b261","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-09-29 03:46:22.312905+00","content_hash":"aadfa82b54b7f12b294435b40c81a3cac63c4874bc052d39b123e12485fa29d0","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/liferay","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"liferay: STAR Level 2 attestation, Trusted Cloud Provider","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2017-01-05","expires_at":"2027-01-27","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/liferay/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4361","fetched_at":"2026-11-02 05:01:45.914171+00","content_hash":"2ac8a9101a57b8877eb6cd736046743b7dc14ce3230df0e9a8fe693006cd55e2","wayback_url":null,"quote":"Liferay, Inc.: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Liferay is listed in CSA STAR with a Level 2 attestation and Trusted Cloud Provider status, issued 23 Nov 2020, as of 17 Sep 2026. That CSA STAR Level 2 attestation, as of 17 Sep 2026, is built on a SOC 2 examination, so Liferay has a SOC 2 examination underlying the registry listing rather than a separately published SOC 2 report. Liferay is listed in the EU-US Data Privacy Framework registry as active under SW-US Certification, EU-US Certification and UK Extension Certification, as of 17 Sep 2026. The Data Privacy Framework listing, as of 17 Sep 2026, was issued 5 Jan 2017 and expires 27 Jan 2027. No public evidence found for FedRAMP or ISO/IEC 27001 as of 17 Sep 2026.","bullets":["CSA STAR - Level 2 attestation, Trusted Cloud Provider, issued 23 Nov 2020 (as of 17 Sep 2026)","SOC 2 - has an examination underlying the CSA STAR Level 2 attestation, issued 23 Nov 2020, not a standalone report (as of 17 Sep 2026)","EU-US Data Privacy Framework - active (SW-US, EU-US, UK Extension), issued 5 Jan 2017, expires 27 Jan 2027 (as of 17 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-20 10:10:59.538413+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/liferay/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T09:07:15.886Z"}