1o

1o is listed in the EU-US Data Privacy Framework registry, and as of 05 Oct 2026 its status is shown as expired and inactive, indicating the DPF self-certification is no longer active. No public evidence found for SOC 2 Type II as of 05 Oct 2026, so no audit report has been identified. No public evidence found for PCI DSS as of 05 Oct 2026, leaving payment card handling controls unverified. No public evidence found for HIPAA as of 05 Oct 2026, so no BAA offering is documented. No public evidence found for ISO 27001 as of 05 Oct 2026, meaning no information security management certification has been identified.

• EU-US Data Privacy Framework: listed in registry, status expired/inactive as of 05 Oct 2026
• SOC 2 Type II: no public evidence found (as of 05 Oct 2026)
• PCI DSS: no public evidence found (as of 05 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.