{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"thoughtspot","name":"ThoughtSpot","domain":"thoughtspot.com","category":"Analytics","one_liner":"ThoughtSpot is the Modern Analytics Cloud","trust_center_url":"https://security.thoughtspot.com/","security_page_url":null,"url":"https://certreports.com/vendors/thoughtspot/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2022-05-16","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/thoughtspot/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/thoughtspot","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"thoughtspot: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2020-07-13","expires_at":"2027-06-08","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/thoughtspot/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4366","fetched_at":"2026-09-17 15:48:27.9112+00","content_hash":"1db4bf625d308524691e2495105dc1e17a56d8aaec20b12eba609953581c5a2d","wayback_url":null,"quote":"ThoughtSpot: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, ThoughtSpot is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) issued 16 May 2022, with no expiry date provided. As of 17 Sep 2026, ThoughtSpot is listed in the EU-US Data Privacy Framework registry with active EU-US Certification, SW-US Certification, and UK Extension Certification status, issued 13 Jul 2020 and expiring 08 Jun 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for ThoughtSpot. As of 17 Sep 2026, no public evidence found for ISO 27001 for ThoughtSpot. As of 17 Sep 2026, no public evidence found for HIPAA for ThoughtSpot, and no subprocessor list evidence was found as of that date.","bullets":["CSA STAR: listed in CSA STAR registry, Level 1 self-assessment (CAIQ), issued 16 May 2022, no expiry given (as of 17 Sep 2026).","EU-US Data Privacy Framework: listed in DPF registry, active EU-US/SW-US/UK Extension Certification, issued 13 Jul 2020, expires 08 Jun 2027 (as of 17 Sep 2026).","SOC 2, ISO 27001, HIPAA: no public evidence found as of 17 Sep 2026; subprocessor count reported as 0."],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:49:10.148892+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:21:29.137Z"}