{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"nylas","name":"Nylas","domain":"nylas.com","category":"Scheduling","one_liner":"Nylas is used by developers around the world to quickly and securely build e-mail, scheduling, and work automation features into their","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/nylas/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2023-01-19","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/nylas/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/nylas-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"nylas, inc.: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2018-10-25","expires_at":"2027-03-26","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/nylas/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/1134","fetched_at":"2026-09-17 15:46:52.464821+00","content_hash":"d64551c6d7b2ae8f27e9d417f4581e33e8d473c5fe2d02684c65f5fb5cab6e9c","wayback_url":null,"quote":"Nylas: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Nylas is listed in CSA STAR with a STAR Level 1 self-assessment (CAIQ), originally issued 19 Jan 2023. As of 17 Sep 2026, Nylas is listed in the EU-US Data Privacy Framework registry with active EU-US, SW-US, and UK Extension Certifications, issued 25 Oct 2018 and expiring 26 Mar 2027. No public evidence found for SOC 2 as of 17 Sep 2026. No public evidence found for ISO 27001 as of 17 Sep 2026. No public evidence found for HIPAA as of 17 Sep 2026.","bullets":["CSA STAR: listed in registry with STAR Level 1 self-assessment (CAIQ), issued 19 Jan 2023 (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in registry, active certification issued 25 Oct 2018, expires 26 Mar 2027 (as of 17 Sep 2026)","SOC 2, ISO 27001, HIPAA: no public evidence found (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:50:02.590783+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T01:13:41.853Z"}