{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"namely","name":"Namely","domain":"namely.com","category":"Compliance and GRC","one_liner":"Manage your people more efficiently and accurately with Namely’s Human Capital Management (HCM) platform and managed","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/namely/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2017-07-07","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/namely/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5003","fetched_at":"2026-11-02 05:02:01.314713+00","content_hash":"9df0c1b958b859d9ce50fe0817eedf417b23137bfed47251aae994496a7f201b","wayback_url":null,"quote":"Namely, Inc.: Inactive","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Namely is listed in the EU-US Data Privacy Framework registry as expired, with the registry recording an inactive status. The EU-US Data Privacy Framework registry entry, as of 17 Sep 2026, records an original certification date of 7 Jul 2017. No public evidence found for SOC 2 Type II as of 17 Sep 2026. No public evidence found for a HIPAA business associate agreement as of 17 Sep 2026. No public evidence found for FedRAMP or CSA STAR as of 17 Sep 2026.","bullets":["Listed in EU-US Data Privacy Framework registry as expired (inactive) as of 17 Sep 2026, originally certified 7 Jul 2017","No public evidence found for SOC 2 Type II as of 17 Sep 2026","No public evidence found for FedRAMP, CSA STAR, or a HIPAA business associate agreement as of 17 Sep 2026"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-27 05:33:35.652312+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/namely/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T09:05:00.462Z"}