{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"rosetta-stone","name":"Rosetta Stone","domain":"rosettastone.com","category":"Education","one_liner":"Learn languages the right way and speak with confidence using Rosetta Stone’s proven immersive method, realistic conversations, and","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/rosetta-stone/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2016-11-19","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/rosetta-stone/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6761","fetched_at":"2026-11-02 05:02:43.572352+00","content_hash":"4bccb5736006455c46f7faad0a50915eeac3c02cc10014d29ff966aa012002c1","wayback_url":null,"quote":"Rosetta Stone Ltd.: Inactive","confidence":1}]}],"brief":{"summary":"Rosetta Stone's only EU-US Data Privacy Framework registry record is marked Inactive, as of 17 Sep 2026, with the original certification dated 19 Nov 2016 and no renewal on file. No public evidence found for SOC 2 as of 17 Sep 2026, meaning no attestation report is listed for Rosetta Stone in this evidence set. No public evidence found for ISO/IEC 27001 as of 17 Sep 2026, so no certification listing exists for Rosetta Stone. No public evidence found for PCI DSS as of 17 Sep 2026. No public evidence found for HIPAA as of 17 Sep 2026, so no BAA statement is recorded for Rosetta Stone.","bullets":["EU-US Data Privacy Framework: Inactive, originally certified 19 Nov 2016, no renewal on file (as of 17 Sep 2026).","No public evidence found for SOC 2 or ISO/IEC 27001 as of 17 Sep 2026.","No public evidence found for PCI DSS or HIPAA as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-28 05:38:08.944086+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/rosetta-stone/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T02:12:12.535Z"}