{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"quizlet-inc","name":"Quizlet","domain":"quizlet.com","category":"Education","one_liner":"Quizlet is a multi-national American education technology company that provides digital study tools, including flashcards, practice","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/quizlet-inc/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2016-12-13","expires_at":"2027-03-20","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/quizlet-inc/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/8107","fetched_at":"2026-09-17 15:50:25.427026+00","content_hash":"7bab875bde5640f97ec1ca612deae309457808978792f8e456c51f5017e80a68","wayback_url":null,"quote":"Quizlet, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Quizlet is listed in the EU-US Data Privacy Framework registry, as of 17 Sep 2026, with an active EU-US Certification, SW-US Certification and UK Extension Certification covering cross-border data transfers. The same registry listing, as of 17 Sep 2026, shows the certification was issued 13 Dec 2016 and is set to expire 20 Mar 2027, with no lapse noted in the interim. No public evidence found for SOC 2 or SOC 1. No public evidence found for ISO/IEC 27001 or PCI DSS. No public evidence found for FedRAMP, CSA STAR or HIPAA.","bullets":["Listed in EU-US Data Privacy Framework registry as of 17 Sep 2026 - active certification issued 13 Dec 2016.","Data Privacy Framework certification set to expire 20 Mar 2027 (registry listing as of 17 Sep 2026).","No public evidence found for SOC 2, ISO/IEC 27001, FedRAMP, CSA STAR or HIPAA."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:48:24.898553+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T22:37:43.197Z"}