{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"mapbox","name":"Mapbox","domain":"mapbox.com","category":"Developer tools","one_liner":"APIs and SDKs for AI-powered maps, location search, turn-by-turn navigation, and geospatial data in mobile or web","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/mapbox/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2017-05-17","expires_at":"2026-11-13","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/mapbox/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5640","fetched_at":"2026-11-02 05:02:16.611098+00","content_hash":"24a74e5ef12ae2aeb53cce98992706f40df35d39b952b3ae4d3e7f1a41b097e7","wayback_url":null,"quote":"Mapbox, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1},{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5640","fetched_at":"2026-10-26 05:02:33.164705+00","content_hash":"ec5fa6c9b2b32eaa919d1ff22e82119e9f490615a05a64adbc388f7cc7764275","wayback_url":null,"quote":"Mapbox, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Mapbox is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US, Swiss-US and UK Extension certifications, with certification dating from 17 May 2017 and current expiry on 13 Nov 2026, per a registry check as of 17 Sep 2026. No public evidence found for a SOC 2 report for Mapbox as of 17 Sep 2026. No public evidence found for ISO/IEC 27001 certification for Mapbox as of 17 Sep 2026. No public evidence found for a HIPAA business associate agreement for Mapbox as of 17 Sep 2026. No public evidence found for PCI DSS validation or FedRAMP authorization for Mapbox as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework: listed as active (EU-US, SW-US, UK Extension), certified since 17 May 2017, expires 13 Nov 2026, as of 17 Sep 2026.","SOC 2, ISO/IEC 27001: no public evidence found, as of 17 Sep 2026.","HIPAA BAA, PCI DSS, FedRAMP: no public evidence found, as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-20 09:57:07.429992+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/mapbox/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:19:15.525Z"}