{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"spell","name":"Spell","domain":"spell.run","category":"DevOps and observability","one_liner":null,"trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/spell/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2019-01-11","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/spell/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6717","fetched_at":"2026-11-02 05:02:42.515702+00","content_hash":"fa074858d83984253cbdad66bac22a62ae24495e2176f4be10dfdcf36d2eb327","wayback_url":null,"quote":"Spell: Inactive","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, the only evidence on file for Spell relates to the EU-US Data Privacy Framework, and that registry listing is expired; the registry record shows the entry as Inactive, carrying an original issue date of 11 Jan 2019 and no recorded active expiry date. No public evidence was found for SOC 2 for Spell as of 17 Sep 2026. No public evidence was found for ISO/IEC 27001 for Spell as of 17 Sep 2026. No public evidence was found for HIPAA for Spell as of 17 Sep 2026. No public evidence was found for FedRAMP, PCI DSS, or CSA STAR registry listings for Spell as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework: expired, registry shows Inactive since original issue 11 Jan 2019 (as of 17 Sep 2026)","SOC 2: no public evidence found (as of 17 Sep 2026)","ISO/IEC 27001: no public evidence found (as of 17 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 10:52:58.412998+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/spell/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T11:57:25.127Z"}