{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"zscaler","name":"Zscaler","domain":"zscaler.com","category":"Security","one_liner":"Zscaler was founded in 2008 on a simple but powerful concept: as applications move to the cloud, security needs to move there as","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/zscaler/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2020-04-29","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"High","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/zscaler/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1719759604","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"Zscaler, Inc. - Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement): FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1719759604","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Zscaler, Inc. - Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement): FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR1719759604","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Zscaler, Inc. - Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement): FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"third_party","state_label":"Reported","sentence":"Reported by the CSA STAR registry as of 17 Sep 2026, not confirmed.","kind":"certificate","status_text":"CSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification","issued_at":"2019-06-18","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/zscaler/iso-27001","evidence":[{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/zscaler","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"zscaler: STAR Level 2 certification, Trusted Cloud Provider","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"level2","status_text":"STAR Level 2 certification, Trusted Cloud Provider","issued_at":"2019-06-18","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/zscaler/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/zscaler","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"zscaler: STAR Level 2 certification, Trusted Cloud Provider","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2016-11-23","expires_at":"2027-07-30","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/zscaler/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4433","fetched_at":"2026-09-17 15:48:29.71226+00","content_hash":"7d568134f8daeee0a13cd76c8c8c70e29ff416f3b2d5870287eae8ce2012f5e0","wayback_url":null,"quote":"Zscaler: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 19 Sep 2026, Zscaler is listed in the FedRAMP registry as FedRAMP Authorized, with authorization dated 29 Apr 2020 and assessed by Schellman Compliance, LLC. As of 17 Sep 2026, Zscaler is listed in the CSA STAR registry at Level 2 certification as a Trusted Cloud Provider, dated 18 Jun 2019. As of 17 Sep 2026, that CSA STAR Level 2 listing is built on an underlying ISO/IEC 27001 certification, also dated 18 Jun 2019. As of 17 Sep 2026, Zscaler is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification, the Swiss-US Certification and the UK Extension Certification, originally issued 23 Nov 2016 and valid through 30 Jul 2027. As of 17 Sep 2026, no public evidence was found for a SOC 2 report for Zscaler.","bullets":["FedRAMP: listed as FedRAMP Authorized, authorized 29 Apr 2020, assessed by Schellman Compliance, LLC (as of 19 Sep 2026)","CSA STAR: Level 2 certification, Trusted Cloud Provider, dated 18 Jun 2019, built on an ISO/IEC 27001 certification (as of 17 Sep 2026)","EU-US Data Privacy Framework: active listing, valid through 30 Jul 2027 (as of 17 Sep 2026)"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:27:00.29991+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T04:02:05.948Z"}