{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"perplexity-ai","name":"Perplexity","domain":"perplexity.ai","category":"AI assistants","one_liner":"Perplexity AI, Inc., or simply Perplexity, is an American privately held software company offering a web search engine that processes user","trust_center_url":"https://trust.perplexity.ai/","security_page_url":null,"url":"https://certreports.com/vendors/perplexity-ai/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/perplexity-ai/hipaa","evidence":[{"source_type":"trust_center","source_name":"Perplexity AI trust centre (Vanta)","url":"https://trust.perplexity.ai/","fetched_at":"2026-09-18 23:03:55.874982+00","content_hash":"1cf9048c5ccdacaceab27b42ae51fee1f24690cc90c0fe54a7cf766a09a91171","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/perplexity-ai/soc-2","evidence":[{"source_type":"trust_center","source_name":"Perplexity AI trust centre (Vanta)","url":"https://trust.perplexity.ai/","fetched_at":"2026-09-18 23:03:55.874982+00","content_hash":"1cf9048c5ccdacaceab27b42ae51fee1f24690cc90c0fe54a7cf766a09a91171","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/perplexity-ai/gdpr","evidence":[{"source_type":"trust_center","source_name":"Perplexity AI trust centre (Vanta)","url":"https://trust.perplexity.ai/","fetched_at":"2026-09-18 23:03:55.874982+00","content_hash":"1cf9048c5ccdacaceab27b42ae51fee1f24690cc90c0fe54a7cf766a09a91171","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2026-02-01","expires_at":null,"period_start":null,"period_end":null,"auditor":"Federal Risk and Authorization Management Program","impact_level":"20x Low","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/perplexity-ai/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2604643715","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"Perplexity AI - Perplexity Enterprise and API Platform: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2604643715","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Perplexity AI - Perplexity Enterprise and API Platform: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2604643715","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Perplexity AI - Perplexity Enterprise and API Platform: FedRAMP Authorized","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a PCI DSS attestation of compliance on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states PCI DSS - SAQ A on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/perplexity-ai/pci-dss","evidence":[{"source_type":"trust_center","source_name":"Perplexity AI trust centre (Vanta)","url":"https://trust.perplexity.ai/","fetched_at":"2026-09-18 23:03:55.874982+00","content_hash":"1cf9048c5ccdacaceab27b42ae51fee1f24690cc90c0fe54a7cf766a09a91171","wayback_url":null,"quote":"PCI DSS - SAQ A","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/perplexity-ai/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Perplexity AI trust centre (Vanta)","url":"https://trust.perplexity.ai/","fetched_at":"2026-09-18 23:03:55.874982+00","content_hash":"1cf9048c5ccdacaceab27b42ae51fee1f24690cc90c0fe54a7cf766a09a91171","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification","issued_at":"2024-10-23","expires_at":"2026-10-08","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/perplexity-ai/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/9020","fetched_at":"2026-09-17 15:50:51.185583+00","content_hash":"439860dfdcffa653a2a5d7480f6e5318c22a48a58d536aa6241390b130aff952","wayback_url":null,"quote":"Perplexity AI: Active: EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Perplexity AI is listed in the FedRAMP registry with a status of 'FedRAMP Authorized', authorized on 1 Feb 2026. As of 17 Sep 2026, Perplexity AI is listed in the EU-US Data Privacy Framework registry as 'Active: EU-US Certification, UK Extension Certification', with certification issued on 23 Oct 2024 and set to expire on 8 Oct 2026. As of 17 Sep 2026, no public evidence found for SOC 2 for Perplexity AI. As of 17 Sep 2026, no public evidence found for HIPAA for Perplexity AI. As of 17 Sep 2026, no subprocessor entries were found in the evidence provided for Perplexity AI.","bullets":["FedRAMP: listed in FedRAMP registry as 'FedRAMP Authorized', issued 1 Feb 2026 (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in DPF registry as 'Active: EU-US Certification, UK Extension Certification', issued 23 Oct 2024, expires 8 Oct 2026 (as of 17 Sep 2026)","SOC 2 and HIPAA: no public evidence found for Perplexity AI (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:47:56.046321+00"},"legal_docs":[{"kind":"privacy","url":"https://www.perplexity.ai/hub/legal/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-18"},{"kind":"subprocessors","url":"https://trust.perplexity.ai/","availability":"public","detail":"23 subprocessors listed on the trust centre","as_of":"2026-09-18"}],"subprocessors":[{"name":"Airbyte","domain":"airbyte.com","purpose":"Data ingestion platform","location":"US","vendor_url":"https://certreports.com/vendors/airbyte/security"},{"name":"Amazon Bedrock","domain":"amazon.com","purpose":"Cloud provider","location":"US","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud provider","location":"US","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Anthropic","domain":"anthropic.com","purpose":"Cloud provider","location":"US","vendor_url":null},{"name":"ClickHouse","domain":"clickhouse.com","purpose":"Data analytics","location":"US","vendor_url":null},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"Cloud monitoring ","location":"US","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Datadog","domain":"datadoghq.com","purpose":"Cloud monitoring","location":"US","vendor_url":"https://certreports.com/vendors/datadog/security"},{"name":"Datafold","domain":"datafold.com","purpose":"Data analytics","location":"US","vendor_url":"https://certreports.com/vendors/datafold/security"},{"name":"ElevenLabs","domain":"elevenlabs.io","purpose":"Text-to-speech services","location":"US","vendor_url":null},{"name":"Fivetran","domain":"fivetran.com","purpose":"Data Ingestion Platform","location":"US","vendor_url":"https://certreports.com/vendors/fivetran/security"},{"name":"Google Cloud","domain":"google.com","purpose":"Cloud provider","location":"US","vendor_url":null},{"name":"Hex","domain":"hex.tech","purpose":"Data analytics ","location":"US","vendor_url":"https://certreports.com/vendors/hex/security"},{"name":"Loops.so","domain":"oneleet.com","purpose":"Marketing","location":"US","vendor_url":"https://certreports.com/vendors/oneleet/security"},{"name":"Merge","domain":"merge.dev","purpose":"Integrations","location":"US","vendor_url":"https://certreports.com/vendors/merge-api-inc/security"},{"name":"Metronome","domain":"metronome.com","purpose":"Finance and payments","location":"US","vendor_url":null},{"name":"Microsoft Azure","domain":"microsoft.com","purpose":"Cloud provider","location":"US","vendor_url":"https://certreports.com/vendors/microsoft/security"},{"name":"Omni Analytics","domain":"omni.co","purpose":"Data analytics","location":"US","vendor_url":"https://certreports.com/vendors/omni-analytics/security"},{"name":"OpenAI","domain":"openai.com","purpose":"Cloud provider","location":"US","vendor_url":"https://certreports.com/vendors/openai/security"},{"name":"Pipedream","domain":"pipedream.com","purpose":"Integrations","location":"US","vendor_url":null},{"name":"Polytomic","domain":"polytomic.com","purpose":"Data Integration and Movement","location":"US","vendor_url":"https://certreports.com/vendors/polytomic/security"},{"name":"Snowflake","domain":"snowflake.com","purpose":"Data storage and processing","location":"US","vendor_url":"https://certreports.com/vendors/snowflake/security"},{"name":"Stripe","domain":"stripe.com","purpose":"Finance and payments","location":"US","vendor_url":"https://certreports.com/vendors/stripe/security"},{"name":"xAI","domain":"x.ai","purpose":"Cloud provider","location":"US","vendor_url":"https://certreports.com/vendors/xai/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T09:12:20.218Z"}