Summary
Appfire Technologies has 1 registry-verified row and 7 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Appfire Technologies states on its trust centre that it holds a SOC 2 report, as of 16 Oct 2026. The vendor also states on its trust centre that it meets GDPR, CCPA/CPRA, and BSI C5 requirements, as of 16 Oct 2026. Appfire states on its trust centre that it holds ISO/IEC 27001:2022 and ISO/IEC 27017 certifications, as of 16 Oct 2026. Appfire displays a HIPAA badge on its trust centre as of 16 Oct 2026, with BAA availability not yet captured. Appfire is listed in the EU-US Data Privacy Framework registry with active EU-US, UK Extension, and SW-US Certifications issued 15 Sep 2023 and expiring 22 Aug 2027, as of 12 Oct 2026.
- SOC 2 - vendor states on its trust centre that it holds a SOC 2 report (as of 16 Oct 2026)
- ISO/IEC 27001:2022 and ISO/IEC 27017 - vendor states on its trust centre (as of 16 Oct 2026)
- HIPAA - badge displayed on trust centre, BAA availability not yet captured (as of 16 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 16 Oct 2026; it is regenerated whenever a row changes.
Evidence count
1verified rows
Compliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 2 Nov 202622 sources
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 2 Nov 202622 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 2 Nov 202622 sources
ISO/IEC 27017Vendor-statedVendor states ISO 27017 on its trust centre
as of 2 Nov 202622 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 2 Nov 20262 sources- CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 2 Nov 202622 sources
BSI C5Vendor-statedVendor states C5 on its trust centre
as of 2 Nov 202622 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.
Change history
- 29 Sep 2026EU-US Data Privacy Framework state changedState moved from Expired to Verified.
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 18 Sep 2026BSI C5 evidence addedA BSI C5 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
Evidence against regulations
All regulations for Appfire TechnologiesHow much of each regulation’s vendor requirements Appfire Technologies’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read