Cogito

Cogito's EU-US Data Privacy Framework entry is listed as inactive, with the original self-certification issued 14 Feb 2018. As of 26 Oct 2026, the EU-US Data Privacy Framework registry shows no renewal on record for Cogito, confirming the expired status of this cross-border transfer mechanism. As of 26 Oct 2026, an expired EU-US Data Privacy Framework listing reflects a lapsed self-certification process and does not indicate anything about Cogito's other security practices. As of 26 Oct 2026, no public evidence was found for SOC 2 for Cogito, and no public evidence was found for HIPAA either. As of 26 Oct 2026, the only compliance evidence on file for Cogito is the expired EU-US Data Privacy Framework self-certification issued 14 Feb 2018.

• EU-US Data Privacy Framework: expired, originally issued 14 Feb 2018, inactive as of 26 Oct 2026.
• SOC 2 Type II: no public evidence found as of 26 Oct 2026.
• HIPAA: no public evidence found as of 26 Oct 2026 (no BAA statement found).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 1 Nov 2026; it is regenerated whenever a row changes.