Skip to main content
CA

Candle

Security and trust center evidence

candle.devCloud and hostingLast verified 2 Nov 2026
Vendor website Are you Candle?

Summary

EU-US Data Privacy Framework mark, CertReports state Expired as of 2 Nov 2026DPFExpired

Candle has , and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Candle's EU-US Data Privacy Framework record is listed as expired, originally issued on 11 Oct 2022, and the registry shows it as inactive as of 19 Oct 2026. No public evidence found for SOC 2 for Candle, as of 19 Oct 2026, meaning no vendor statement or audit report was located for this framework. No public evidence found for ISO/IEC 27001 for Candle, as of 19 Oct 2026, with no certification body listing identified. No public evidence found for HIPAA for Candle, as of 19 Oct 2026, so no BAA statement was located on any trust centre reviewed. No public evidence found for GDPR for Candle, as of 19 Oct 2026, leaving the expired Data Privacy Framework record as the sole compliance evidence currently on file.

  • EU-US Data Privacy Framework: expired, issued 11 Oct 2022, inactive as of 19 Oct 2026
  • SOC 2 / ISO/IEC 27001: no public evidence found (as of 19 Oct 2026)
  • HIPAA / GDPR: no public evidence found (as of 19 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Oct 2026; it is regenerated whenever a row changes.

Among cloud and hosting vendors

0verified rows

Category median 0, across 145 indexed cloud and hosting vendors. Candle has no registry-verified row yet, like 51 percent of them; its evidence is vendor-stated or reported.

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Change history

  1. 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.

Evidence against regulations

All regulations for Candle

How much of each regulation’s vendor requirements Candle’s public evidence reaches.

Reviewing a vendor on public evidence

All articles