{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"thread","name":"Thread","domain":"getthread.com","category":"Customer support","one_liner":"Supercharge your service desk with effortless assistive and agentic AI—no new hires required and guaranteed","trust_center_url":"https://trust.getthread.com/","security_page_url":null,"url":"https://certreports.com/vendors/thread/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 30 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-30","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/thread/soc-2","evidence":[{"source_type":"trust_center","source_name":"Thread trust centre (Vanta)","url":"https://trust.getthread.com/","fetched_at":"2026-09-29 02:07:13.905085+00","content_hash":"7108998879dbc08682c7d4d377d93d3a94f8d269c146aad168e776300663e1d7","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Thread trust centre (Vanta)","url":"https://trust.getthread.com/","fetched_at":"2026-09-18 23:04:30.120699+00","content_hash":"6aad577634dd94be2996f7cb517ddfaf263431bfa3fd6ef2a96ff58d2779a0e4","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/thread/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/9545","fetched_at":"2026-11-02 05:03:49.512976+00","content_hash":"3694bda4d81e7e569a3c44cc9b6f6eae64a693893ed03a61b1644f4aa1f7b58c","wayback_url":null,"quote":"Thread: Inactive","confidence":1}]}],"brief":{"summary":"Thread states on its trust centre that it holds SOC 2, as of 18 Sep 2026. No issuance or expiry date is recorded for Thread's SOC 2 statement, as of 18 Sep 2026. For the EU-US Data Privacy Framework, Thread's registry entry is listed as expired, as of 17 Sep 2026. No issuance date is recorded for Thread's expired Data Privacy Framework entry, as of 17 Sep 2026. Aside from the SOC 2 statement, as of 18 Sep 2026, and the expired Data Privacy Framework entry, as of 17 Sep 2026, no other framework evidence appears in the rows reviewed for Thread.","bullets":["SOC 2 - vendor states on its trust centre it holds SOC 2 (as of 18 Sep 2026)","EU-US Data Privacy Framework - registry entry listed as expired, no issuance date recorded (as of 17 Sep 2026)","No other framework evidence found for Thread in the rows reviewed (as of 18 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-21 11:16:46.023618+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.getthread.com/","availability":"public","detail":"17 subprocessors listed on the trust centre","as_of":"2026-09-30"},{"kind":"privacy","url":"https://getthread.com/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-30"}],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/thread/regulations/{regulation}","subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud provider","location":null,"vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Auth0","domain":"auth0.com","purpose":"Identity provider","location":null,"vendor_url":"https://certreports.com/vendors/auth0/security"},{"name":"Checkr","domain":"checkr.com","purpose":"Employee management","location":null,"vendor_url":"https://certreports.com/vendors/checkr/security"},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"Cloud monitoring","location":null,"vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Entra (Office 365)","domain":"office.com","purpose":"Document management","location":null,"vendor_url":null},{"name":"GitHub","domain":"github.com","purpose":"Version control","location":null,"vendor_url":"https://certreports.com/vendors/github/security"},{"name":"Gong","domain":"gong.io","purpose":"Sales","location":null,"vendor_url":"https://certreports.com/vendors/gong/security"},{"name":"HubSpot","domain":"hubspot.com","purpose":"Marketing","location":null,"vendor_url":"https://certreports.com/vendors/hubspot/security"},{"name":"Justworks","domain":"justworks.com","purpose":"Employee management","location":null,"vendor_url":null},{"name":"Linear","domain":"linear.app","purpose":"Collaboration","location":null,"vendor_url":"https://certreports.com/vendors/linear/security"},{"name":"Microsoft Azure","domain":"microsoft.com","purpose":"Cloud provider","location":null,"vendor_url":"https://certreports.com/vendors/microsoft/security"},{"name":"New Relic","domain":"newrelic.com","purpose":"Data analytics","location":null,"vendor_url":"https://certreports.com/vendors/new-relic/security"},{"name":"PagerDuty","domain":"pagerduty.com","purpose":"Cloud monitoring","location":null,"vendor_url":"https://certreports.com/vendors/pagerduty/security"},{"name":"Sentry","domain":"sentry.io","purpose":"Cloud monitoring","location":null,"vendor_url":"https://certreports.com/vendors/sentry/security"},{"name":"Slack","domain":"slack.com","purpose":"Collaboration","location":null,"vendor_url":"https://certreports.com/vendors/slack-technologies/security"},{"name":"Snowflake","domain":"snowflake.com","purpose":"Data storage and processing","location":null,"vendor_url":"https://certreports.com/vendors/snowflake/security"},{"name":"Vanta","domain":"vanta.com","purpose":"Security","location":null,"vendor_url":"https://certreports.com/vendors/vanta/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:20:20.179Z"}