Cengage

Cengage's EU-US Data Privacy Framework record is marked inactive as of 26 Oct 2026, indicating an expired certification status. The record shows an issuance date of 30 Oct 2025 but no expiry date is listed in the evidence. This expired EU-US Data Privacy Framework status is the only compliance evidence available for Cengage as of 26 Oct 2026. No SOC 2, PCI DSS, or HIPAA evidence appears in the rows provided for Cengage as of 26 Oct 2026. Reviewers relying on cross-border data transfer mechanisms should note the expired status of this framework as of 26 Oct 2026.

• EU-US Data Privacy Framework: expired/inactive as of 26 Oct 2026, issued 30 Oct 2025.
• No expiry date listed for the EU-US Data Privacy Framework record as of 26 Oct 2026.
• No public evidence found for SOC 2, PCI DSS, or HIPAA as of 26 Oct 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Oct 2026; it is regenerated whenever a row changes.