BAO Systems

BAO Systems states on its trust centre an EU-US Data Privacy Framework record that is marked inactive as of 12 Oct 2026. The EU-US Data Privacy Framework entry shows an original listing date of 20 May 2024, as of 12 Oct 2026. As of 12 Oct 2026, the EU-US Data Privacy Framework status is expired, meaning the framework can no longer be relied upon for cross-border data transfer claims. No expiration date is separately listed for the EU-US Data Privacy Framework entry, though the inactive status as of 12 Oct 2026 indicates the listing has lapsed. No other compliance frameworks appear in the evidence provided for BAO Systems as of 12 Oct 2026.

• EU-US Data Privacy Framework: inactive/expired, listed 20 May 2024 (as of 12 Oct 2026)
• No PCI DSS, SOC 2, or other framework evidence found as of 12 Oct 2026
• Reviewers should confirm current data transfer mechanism given expired EU-US DPF status (as of 12 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 18 Oct 2026; it is regenerated whenever a row changes.