{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"metricstream","name":"Metricstream","domain":"metricstream.com","category":"Compliance and GRC","one_liner":"MetricStream offers Governance, Risk Management and Compliance (GRC) software solutions that allow companies across industries to","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/metricstream/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2017-03-23","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/metricstream/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/2017","fetched_at":"2026-11-02 05:00:51.539196+00","content_hash":"dc84119a5426c91effb81802c7fed82f776c53df1769d6564cd9d57899986487","wayback_url":null,"quote":"Metricstream, Inc.: Inactive","confidence":1}]}],"brief":{"summary":"Metricstream's EU-US Data Privacy Framework self-certification was issued on 23 Mar 2017 and is listed as inactive as of 17 Sep 2026, with no renewal recorded. No public evidence found for a SOC 2 Type II report for Metricstream as of 17 Sep 2026. No public evidence found for an ISO/IEC 27001 certification for Metricstream as of 17 Sep 2026. No public evidence found for PCI DSS validation for Metricstream as of 17 Sep 2026. No public evidence found for a HIPAA BAA offered by Metricstream as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework: issued 23 Mar 2017, now inactive, as of 17 Sep 2026.","SOC 2 and ISO/IEC 27001: no public evidence found, as of 17 Sep 2026.","PCI DSS and HIPAA BAA: no public evidence found, as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-27 05:32:03.050592+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/metricstream/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T09:58:55.742Z"}