CGI Federal

As of 26 Oct 2026, CGI Federal's EU-US Data Privacy Framework registry listing is shown as expired and marked inactive, meaning the certification is no longer active under the DPF program. As of 26 Oct 2026, records show the EU-US Data Privacy Framework listing was originally issued on 23 May 2019, prior to its lapse. As of 26 Oct 2026, no public evidence found for a SOC 2 Type II report. As of 26 Oct 2026, no public evidence found for ISO 27001 certification. As of 26 Oct 2026, no public evidence found for a HIPAA BAA.

• EU-US Data Privacy Framework: registry listing expired/inactive (as of 26 Oct 2026); originally issued 23 May 2019.
• No active EU-US Data Privacy Framework certification found as of 26 Oct 2026.
• SOC 2, ISO 27001, HIPAA: no public evidence found (as of 26 Oct 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 30 Oct 2026; it is regenerated whenever a row changes.