{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"melissa","name":"Melissa","domain":"melissa.com","category":"Marketing","one_liner":"Try our easy to-use APIs & CRM data cleansing tools to improve your data quality and marketing","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/melissa/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2023-09-14","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"LI-SaaS","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/melissa/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2210666939","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"Melissa - Melissa GovCloud Address Suite: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2210666939","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Melissa - Melissa GovCloud Address Suite: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2210666939","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Melissa - Melissa GovCloud Address Suite: FedRAMP Authorized","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification","issued_at":"2017-05-26","expires_at":"2027-08-19","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/melissa/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4998","fetched_at":"2026-09-17 15:48:46.441628+00","content_hash":"e104b370b21e76f4d9796b4c500d828038a5e99797161081b4fcaf4ba165e7ec","wayback_url":null,"quote":"Melissa Data Corporation: Active: EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Melissa is listed in the FedRAMP registry as FedRAMP Authorized, with the authorization issued on 14 Sep 2023 and audited by Schellman Compliance, LLC. As of 17 Sep 2026, Melissa is listed in the EU-US Data Privacy Framework registry with an active status covering EU-US Certification and UK Extension Certification, originally issued 26 May 2017 and set to expire 19 Aug 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for Melissa. As of 17 Sep 2026, no public evidence found for HIPAA for Melissa. As of 17 Sep 2026, no subprocessors were listed in the evidence provided for Melissa.","bullets":["FedRAMP: listed in FedRAMP registry as FedRAMP Authorized, issued 14 Sep 2023, audited by Schellman Compliance, LLC (as of 17 Sep 2026).","EU-US Data Privacy Framework: listed in DPF registry as active (EU-US Certification, UK Extension Certification), issued 26 May 2017, expires 19 Aug 2027 (as of 17 Sep 2026).","SOC 2 and HIPAA: no public evidence found for Melissa (as of 17 Sep 2026)."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:47:37.85645+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T06:08:19.988Z"}