{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"malwarebytes","name":"Malwarebytes","domain":"malwarebytes.com","category":"Security","one_liner":"All-in-one cybersecurity software for all your","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/malwarebytes/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2026-04-06","expires_at":"2027-04-06","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/malwarebytes/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/10020","fetched_at":"2026-11-02 05:04:00.571516+00","content_hash":"4f8d42f2d2547e91e4a59e45afc73a9d7609919afae5f78ea0426ea23700f0ca","wayback_url":null,"quote":"ThreatDown: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Malwarebytes is listed in the EU-US Data Privacy Framework registry as active for the EU-US Certification, SW-US Certification and UK Extension Certification, per a registry record dated 17 Sep 2026. The Data Privacy Framework certification was issued 6 Apr 2026, per the same 17 Sep 2026 registry record. The Data Privacy Framework registry lists the certification's validity running through 6 Apr 2027, per the record dated 17 Sep 2026. As of 17 Sep 2026, the Data Privacy Framework registry entry shows no expiry has occurred. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA, PCI DSS or FedRAMP for Malwarebytes as of 17 Sep 2026.","bullets":["Listed in the EU-US Data Privacy Framework registry as active (EU-US, SW-US, UK Extension Certifications), issued 6 Apr 2026, valid through 6 Apr 2027, per record dated 17 Sep 2026.","No expiry recorded as of 17 Sep 2026.","No public evidence found for SOC 2, ISO/IEC 27001, HIPAA, PCI DSS or FedRAMP as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:33:24.60991+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/malwarebytes/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T20:25:37.186Z"}