ComplianceMetrix

Security and trust center evidence

Gain control and transparency over your supply chain, deliver quality products and services, and ensure compliance and drive performance

compliancemetrix.com ProcurementLast verified 2 Nov 2026

Vendor website Are you ComplianceMetrix?

DPFExpired

ComplianceMetrix has , and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 26 Oct 2026, the EU-US Data Privacy Framework registry lists ComplianceMetrix's participation as Inactive, with the original listing issued on 16 Nov 2017 and now expired. No public evidence found for SOC 2 as of 26 Oct 2026, so no attestation report details are available. No public evidence found for PCI DSS as of 26 Oct 2026, leaving payment card compliance unconfirmed from the supplied data. No public evidence found for HIPAA as of 26 Oct 2026, so no BAA offering can be confirmed for this vendor. Based on the evidence as of 26 Oct 2026, the only documented framework for ComplianceMetrix is the expired EU-US Data Privacy Framework listing originally issued in 2017.

EU-US Data Privacy Framework: listed as Inactive (expired) as of 26 Oct 2026, originally issued 16 Nov 2017.
SOC 2: no public evidence found as of 26 Oct 2026.
PCI DSS: no public evidence found as of 26 Oct 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 1 Nov 2026; it is regenerated whenever a row changes.

Among procurement vendors

0verified rows

Category median 0, across 43 indexed procurement vendors. ComplianceMetrix has no registry-verified row yet, like 53 percent of them; its evidence is vendor-stated or reported.

audit trailquality assurancesupply chain compliancevendor management

Compare with similar vendors

Pick your own comparison

Compliance grid

EU-US Data Privacy FrameworkExpired
Inactive
as of 2 Nov 2026
1 source

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.