{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"stackpath-llc","name":"StackPath","domain":"stackpath.com","category":"Cloud and hosting","one_liner":null,"trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/stackpath-llc/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2017-08-23","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/stackpath-llc/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4597","fetched_at":"2026-11-02 05:01:51.528208+00","content_hash":"f94b75a6d56e65f3bde89fdd9074241d74805c2a1b51c0f4e2ad25a45ebacfd7","wayback_url":null,"quote":"StackPath, LLC: Inactive","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, StackPath's EU-US Data Privacy Framework registry listing shows an inactive status, with the original self-certification recorded on 23 Aug 2017 and no expiry date logged in the registry. This Data Privacy Framework entry is called out as expired as of 17 Sep 2026, meaning the transfer mechanism it once supported is no longer active in the registry. As of 17 Sep 2026, no public evidence was found for SOC 2 Type II for StackPath. As of 17 Sep 2026, no public evidence was found for ISO 27001, PCI DSS or a HIPAA BAA for StackPath. As of 17 Sep 2026, no vendor statement on GDPR or CCPA / CPRA was found on a trust centre for StackPath.","bullets":["EU-US Data Privacy Framework: expired listing, self-certified 23 Aug 2017, marked inactive as of 17 Sep 2026.","SOC 2 Type II: no public evidence found (as of 17 Sep 2026).","ISO 27001 / PCI DSS / HIPAA BAA: no public evidence found (as of 17 Sep 2026)."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-28 05:45:16.68358+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/stackpath-llc/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-04T01:53:11.346Z"}