{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"panopto","name":"Panopto","domain":"panopto.com","category":"Education","one_liner":"At Panopto, we believe that video can have a transformative effect on","trust_center_url":"https://compliance.panopto.com/","security_page_url":null,"url":"https://certreports.com/vendors/panopto/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/soc-2","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/gdpr","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2021-05-25","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/panopto/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/panopto","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"panopto: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/security","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"ISO 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/security","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"ISO 27018:2019","confidence":1}]},{"framework":"iso-9001","framework_name":"ISO 9001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO 9001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 9001:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/security","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"ISO/IEC 9001:2015","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification, SW-US Certification","issued_at":"2023-10-20","expires_at":"2027-01-20","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/panopto/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/2778","fetched_at":"2026-09-17 15:47:41.966146+00","content_hash":"81ad9213a3bbee6f91825ad9d70e13e083c52aa98520f3ebc748ec11829976be","wayback_url":null,"quote":"Panopto, Inc.: Active: EU-US Certification, UK Extension Certification, SW-US Certification","confidence":1}]},{"framework":"txramp","framework_name":"TX-RAMP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an TX-RAMP certification on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states TX-RAMP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/panopto/security","evidence":[{"source_type":"trust_center","source_name":"Panopto trust centre (Vanta)","url":"https://compliance.panopto.com/","fetched_at":"2026-09-18 23:05:25.478352+00","content_hash":"8d1ff780227b0ca8a9bb3f79643170d050945f04016d80e1a27999c2f8f2a394","wayback_url":null,"quote":"TX-RAMP","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Panopto is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) originally issued 25 May 2021. As of 17 Sep 2026, this CSA STAR entry does not carry an expiration date in the evidence provided. As of 17 Sep 2026, Panopto is listed in the EU-US Data Privacy Framework registry as active, covering EU-US Certification, UK Extension Certification, and SW-US Certification, issued 20 Oct 2023 and set to expire 20 Jan 2027. As of 17 Sep 2026, no public evidence found for SOC 2, ISO 27001, or HIPAA/BAA status for Panopto. As of 17 Sep 2026, no subprocessor records were found in the evidence provided.","bullets":["CSA STAR: listed in CSA STAR registry, Level 1 self-assessment (CAIQ), issued 25 May 2021, as of 17 Sep 2026","EU-US Data Privacy Framework: listed in DPF registry as active (EU-US, UK Extension, SW-US), issued 20 Oct 2023, expires 20 Jan 2027, as of 17 Sep 2026","SOC 2, ISO 27001, HIPAA/BAA: no public evidence found, as of 17 Sep 2026"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:51:48.533118+00"},"legal_docs":[{"kind":"security_txt","url":"https://compliance.panopto.com/","availability":"public","detail":"Public documents on the trust centre: Panopto Inc SOC 3","as_of":"2026-09-18"},{"kind":"subprocessors","url":"https://compliance.panopto.com/","availability":"public","detail":"10 subprocessors listed on the trust centre","as_of":"2026-09-18"}],"subprocessors":[{"name":"All Lines Technology","domain":"all-lines-tech.com","purpose":"24x7 customer support services","location":"United States","vendor_url":null},{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Web hosting and translation services","location":"United States, Canada, Ireland, Australia, Japan, or Singapore","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Google Analytics","domain":"google.com","purpose":"Business operations","location":"Any country in which Google maintains facilities.","vendor_url":null},{"name":"Luzmo NV","domain":"luzmo.com","purpose":"Data analytics services","location":"United States, Canada, Ireland, Australia, Japan or Singapore","vendor_url":null},{"name":"Marketo","domain":"marketo.com","purpose":"Business operations","location":"United States","vendor_url":"https://certreports.com/vendors/marketo/security"},{"name":"Omni.ai","domain":"getomni.ai","purpose":"Translation and transcription services","location":"United States, Canada, Ireland, Australia, Japan or Singapore","vendor_url":null},{"name":"Pendo.io","domain":"pendo.io","purpose":"Business operations","location":"United States","vendor_url":"https://certreports.com/vendors/pendo/security"},{"name":"Salesforce","domain":"salesforce.com","purpose":"Business operations","location":"United States","vendor_url":null},{"name":"Speechmatics","domain":"speechmatics.com","purpose":"Transcription services","location":"United States, Canada, Ireland, Australia, Japan or Singapore","vendor_url":null},{"name":"Verbit, Inc.","domain":"verbit.ai","purpose":"Captioning services","location":"United States","vendor_url":"https://certreports.com/vendors/verbit-inc/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-21T00:56:04.801Z"}