{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"squarespace","name":"Squarespace","domain":"squarespace.com","category":null,"one_liner":"Create a website and grow your business with a free Squarespace","trust_center_url":"https://www.squarespace.com/security","security_page_url":null,"url":"https://certreports.com/vendors/squarespace/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2019-01-24","expires_at":"2026-12-09","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/squarespace/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5868","fetched_at":"2026-09-17 15:49:12.570809+00","content_hash":"e4da52d883c400b39080b441c26e3b1bc0560bf8bed309c6107c9f17d4b32649","wayback_url":null,"quote":"A-ISAC: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Squarespace is listed in the Data Privacy Framework registry with an active status as of 17 Sep 2026. The Data Privacy Framework listing for Squarespace shows active EU-US Certification, Swiss-US Certification and UK Extension Certification as of 17 Sep 2026. The EU-US Data Privacy Framework certification held by Squarespace was issued 24 Jan 2019, as of 17 Sep 2026. The EU-US Data Privacy Framework certification held by Squarespace is set to expire 9 Dec 2026, as of 17 Sep 2026. Aside from the Data Privacy Framework listing, no other frameworks appear in the evidence supplied for Squarespace as of 17 Sep 2026, so no public evidence was found for SOC 2, ISO 27001, HIPAA, PCI DSS or GDPR as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework: active EU-US, Swiss-US and UK Extension certifications listed in DPF registry, issued 24 Jan 2019, expires 9 Dec 2026, as of 17 Sep 2026.","No public evidence found for SOC 2, ISO 27001, HIPAA or PCI DSS as of 17 Sep 2026.","No public evidence found for GDPR or CCPA/CPRA as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:40:09.092401+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T06:30:38.315Z"}