{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"zip","name":"Zip","domain":"ziphq.com","category":"Procurement","one_liner":"The future of B2B spend","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/zip/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2024-04-25","expires_at":"2027-03-27","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/zip/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/8836","fetched_at":"2026-11-02 05:03:32.558509+00","content_hash":"eb483152b9831e066ef895f8b2e4ce8cbc0ced9c0dcbe7fcae709e53424401b7","wayback_url":null,"quote":"ZipHQ, Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Zip is listed in the Data Privacy Framework registry as of 17 Sep 2026, with active EU-US Certification, Swiss-US Certification and UK Extension Certification recorded (Data Privacy Framework, as of 17 Sep 2026). The Data Privacy Framework certification was issued 25 Apr 2024 and remains active through 27 Mar 2027 (Data Privacy Framework, as of 17 Sep 2026). No public evidence was found confirming a SOC 2 report for Zip (as of 17 Sep 2026). No public evidence was found confirming ISO/IEC 27001 certification for Zip (as of 17 Sep 2026). No public evidence was found for GDPR or PCI DSS documentation on Zip's trust centre (as of 17 Sep 2026).","bullets":["Listed in Data Privacy Framework registry - active EU-US, Swiss-US and UK Extension Certification (Data Privacy Framework, as of 17 Sep 2026).","Data Privacy Framework certification issued 25 Apr 2024, active through 27 Mar 2027 (Data Privacy Framework, as of 17 Sep 2026).","No public evidence found for SOC 2 or ISO/IEC 27001 (as of 17 Sep 2026)."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:07:31.416233+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/zip/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T21:18:15.991Z"}