Avala AI

As of 30 Sep 2026, Avala AI states on its trust centre that it holds SOC 2. As of 30 Sep 2026, Avala AI also states on its trust centre that it holds GDPR. As of 12 Oct 2026, Avala AI is listed in the EU-US Data Privacy Framework registry with active EU-US Certification, SW-US Certification, and UK Extension Certification, issued 03 Jul 2025 and running through 23 Sep 2027. No HIPAA evidence was supplied, so as of 12 Oct 2026, no public evidence found for HIPAA. The SOC 2 and GDPR statements, as of 30 Sep 2026, are vendor-asserted, while the Data Privacy Framework status, as of 12 Oct 2026, is independently listed in a registry.

• SOC 2: vendor states on its trust centre it holds SOC 2 (as of 30 Sep 2026)
• GDPR: vendor states on its trust centre it holds GDPR (as of 30 Sep 2026)
• EU-US Data Privacy Framework: listed in registry, active through 23 Sep 2027 (as of 12 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 18 Oct 2026; it is regenerated whenever a row changes.