{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"yahoo","name":"Yahoo","domain":"yahooinc.com","category":null,"one_liner":"Yahoo, the trusted guide for millions globally with iconic products for 30+ years—offers advertisers omnichannel solutions and powerful","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/yahoo/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2024-10-09","expires_at":"2026-10-06","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/yahoo/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/8972","fetched_at":"2026-09-17 15:50:50.003273+00","content_hash":"7e9373034cad5a56e3e0b1737657d7d506a95ba9adea839bae70983e03c69d0e","wayback_url":null,"quote":"Yahoo, Inc: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Yahoo is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification, SW-US Certification and UK Extension Certification, as of 17 Sep 2026. The Data Privacy Framework listing shows a certification date of 9 Oct 2024 and an expiry of 6 Oct 2026, as of 17 Sep 2026. For FedRAMP, no public evidence found in the FedRAMP Marketplace, as of 19 Sep 2026. For CSA STAR, no public evidence found in the CSA STAR registry, as of 17 Sep 2026. For PCI DSS, no public evidence found on the Visa Global Registry of Service Providers, as of 17 Sep 2026.","bullets":["EU-US Data Privacy Framework - listed in the DPF registry as active (EU-US, SW-US, UK Extension Certifications); issued 9 Oct 2024, expires 6 Oct 2026; as of 17 Sep 2026.","FedRAMP - no public evidence found, as of 19 Sep 2026.","CSA STAR and PCI DSS - no public evidence found, as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:14:54.482072+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T01:17:38.494Z"}