Baremetrics

Baremetrics states on its trust centre an EU-US Data Privacy Framework record that is marked inactive as of 12 Oct 2026. The EU-US Data Privacy Framework entry shows an original listing date of 14 Sep 2018, as of 12 Oct 2026. As of 12 Oct 2026, the EU-US Data Privacy Framework status is expired, indicating the framework listing has lapsed since its 2018 issue date. No expiration date is separately recorded for the EU-US Data Privacy Framework entry, though the inactive status as of 12 Oct 2026 confirms it is no longer current. No other compliance frameworks appear in the evidence provided for Baremetrics as of 12 Oct 2026.

• EU-US Data Privacy Framework: inactive/expired, listed 14 Sep 2018 (as of 12 Oct 2026)
• No PCI DSS, SOC 2, or other framework evidence found as of 12 Oct 2026
• Reviewers should confirm current data transfer mechanism given expired EU-US DPF status (as of 12 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 18 Oct 2026; it is regenerated whenever a row changes.