{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"quickbase","name":"Quickbase","domain":"quickbase.com","category":"No-code and automation","one_liner":"Quickbase is a cloud-based platform that allows businesses to create custom applications and workflows to streamline their processes and","trust_center_url":"https://trust.quickbase.com/","security_page_url":null,"url":"https://certreports.com/vendors/quickbase/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/quickbase/hipaa","evidence":[{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-29 02:03:30.235965+00","content_hash":"a523c803f8194460621cf0a721aaccde07da96dc2167d1f98360a30a6c403e72","wayback_url":null,"quote":"HIPAA Security Rule","confidence":1},{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-18 23:03:17.334273+00","content_hash":"e6e16d75dc07fdf20d586984bd0d71a4dfed25cc274588bb15bc15d147ebac49","wayback_url":null,"quote":"HIPAA Security Rule","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":"type2","status_text":"Vendor states SOC2 - Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/quickbase/soc-2","evidence":[{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-29 02:03:30.235965+00","content_hash":"a523c803f8194460621cf0a721aaccde07da96dc2167d1f98360a30a6c403e72","wayback_url":null,"quote":"SOC2 - Type II","confidence":1},{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-18 23:03:17.334273+00","content_hash":"e6e16d75dc07fdf20d586984bd0d71a4dfed25cc274588bb15bc15d147ebac49","wayback_url":null,"quote":"SOC2 - Type II","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/quickbase/gdpr","evidence":[{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-29 02:03:30.235965+00","content_hash":"a523c803f8194460621cf0a721aaccde07da96dc2167d1f98360a30a6c403e72","wayback_url":null,"quote":"GDPR","confidence":1},{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-18 23:03:17.334273+00","content_hash":"e6e16d75dc07fdf20d586984bd0d71a4dfed25cc274588bb15bc15d147ebac49","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 26 Oct 2026.","kind":"level2","status_text":"STAR Level 2 attestation","issued_at":"2018-04-30","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-10-26","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/quickbase/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/quickbase","fetched_at":"2026-10-26 05:00:05.217959+00","content_hash":"0c3d16dcbd77d639d256c2f5de5eac7c995deb3d9c8ecb697f3919e064cfa0fd","wayback_url":null,"quote":"quickbase: STAR Level 2 attestation","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/quickbase","fetched_at":"2026-10-19 05:00:04.207159+00","content_hash":"6ebb0150315154b32c59fd3d2a81bb4bc4a9c9dabf7b485b5276104bdf852acb","wayback_url":null,"quote":"quickbase: STAR Level 2 attestation","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/quickbase","fetched_at":"2026-10-12 05:00:04.718981+00","content_hash":"be2cb50e52128b9a1c5b016c9a48d1831b9215e7effe345b5df6a034ef5f2e29","wayback_url":null,"quote":"quickbase: STAR Level 2 attestation","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/quickbase","fetched_at":"2026-10-05 05:00:04.451025+00","content_hash":"3b3fda577efc5eb9a00af6a8040caf609c1fc2a294d846b2dcab0e8c2303b261","wayback_url":null,"quote":"quickbase: STAR Level 2 attestation","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/quickbase","fetched_at":"2026-09-29 03:46:22.312905+00","content_hash":"aadfa82b54b7f12b294435b40c81a3cac63c4874bc052d39b123e12485fa29d0","wayback_url":null,"quote":"quickbase: STAR Level 2 attestation","confidence":1},{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/quickbase","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"quickbase: STAR Level 2 attestation","confidence":1}]},{"framework":"soc-1","framework_name":"SOC 1","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 1 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":"type2","status_text":"Vendor states SOC1 - Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/quickbase/security","evidence":[{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-29 02:03:30.235965+00","content_hash":"a523c803f8194460621cf0a721aaccde07da96dc2167d1f98360a30a6c403e72","wayback_url":null,"quote":"SOC1 - Type II","confidence":1},{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-18 23:03:17.334273+00","content_hash":"e6e16d75dc07fdf20d586984bd0d71a4dfed25cc274588bb15bc15d147ebac49","wayback_url":null,"quote":"SOC1 - Type II","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2017-10-31","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/quickbase/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5771","fetched_at":"2026-11-02 05:02:19.825118+00","content_hash":"ff524da223149c2fc8bce950c2384cd442318f2613d95e97dc6c6c4423f160f5","wayback_url":null,"quote":"Quickbase: Inactive","confidence":1}]},{"framework":"txramp","framework_name":"TX-RAMP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an TX-RAMP certification on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states TX-RAMP Level 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/quickbase/security","evidence":[{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-29 02:03:30.235965+00","content_hash":"a523c803f8194460621cf0a721aaccde07da96dc2167d1f98360a30a6c403e72","wayback_url":null,"quote":"TX-RAMP Level 2","confidence":1},{"source_type":"trust_center","source_name":"Quickbase trust centre (Vanta)","url":"https://trust.quickbase.com/","fetched_at":"2026-09-18 23:03:17.334273+00","content_hash":"e6e16d75dc07fdf20d586984bd0d71a4dfed25cc274588bb15bc15d147ebac49","wayback_url":null,"quote":"TX-RAMP Level 2","confidence":1}]}],"brief":{"summary":"Quickbase states on its trust centre that it has a SOC 2 Type II report and a SOC 1 Type II report as of 18 Sep 2026. Quickbase displays a HIPAA badge on its trust centre as of 18 Sep 2026, though BAA availability has not yet been captured. Quickbase states on its trust centre that it addresses GDPR and holds TX-RAMP Level 2 as of 18 Sep 2026. Quickbase is listed in the CSA STAR registry as of 17 Sep 2026 with a STAR Level 2 attestation issued 30 Apr 2018. Quickbase's EU-US Data Privacy Framework listing, as of 17 Sep 2026, is inactive; it was issued 31 Oct 2017.","bullets":["States SOC 2 Type II and SOC 1 Type II reports on trust centre as of 18 Sep 2026.","HIPAA badge displayed (BAA availability not confirmed) as of 18 Sep 2026; listed in CSA STAR registry (STAR Level 2, issued 30 Apr 2018) as of 17 Sep 2026.","EU-US Data Privacy Framework listing is inactive as of 17 Sep 2026 (issued 31 Oct 2017); states TX-RAMP Level 2 and GDPR on trust centre as of 18 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 12:06:01.728057+00"},"legal_docs":[{"kind":"privacy","url":"https://www.quickbase.com/privacy","availability":"public","detail":null,"as_of":"2026-09-30"}],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/quickbase/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:20:21.583Z"}