BigID

Security and trust center evidence

BigID’s cloud/SaaS data intelligence platform enables organizations to know their enterprise data and take action for privacy, protection

bigid.com Research and data providersLast verified 26 Oct 2026

Request the report Are you BigID?

CSA STARVerified

DPFVerified

BigID has 2 registry-verified rows in the CertReports index, last verified 26 Oct 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

BigID is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) dated 12 Aug 2022, as of 17 Sep 2026. BigID is listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification, Swiss-US Certification and UK Extension Certification, as of 17 Sep 2026. The EU-US Data Privacy Framework registry shows BigID's certification issued on 19 Dec 2018, as of 17 Sep 2026. The EU-US Data Privacy Framework registry shows BigID's certification set to expire on 22 Jan 2027, as of 17 Sep 2026. No public evidence found for SOC 2 or ISO/IEC 27001 as of 17 Sep 2026.

CSA STAR: Level 1 self-assessment (CAIQ) dated 12 Aug 2022, as of 17 Sep 2026
EU-US DPF: listed active (EU-US, SW-US, UK Extension Certifications) - issued 19 Dec 2018, expires 22 Jan 2027, as of 17 Sep 2026
SOC 2 / ISO/IEC 27001: no public evidence found, as of 17 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 20 Sep 2026; it is regenerated whenever a row changes.

Among research and data providers vendors

2verified rows

Category median 0, across 147 indexed research and data providers vendors. BigID has more verified rows than 95 percent of them.

data classificationdata discoverydata governanceprivacy management

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.

Subprocessors

No subprocessor list captured yet.

Change history

18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the Research and data providers category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.