Summary
Cortical.io has , and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, Cortical.io's EU-US Data Privacy Framework listing is marked inactive, indicating an expired status. The EU-US Data Privacy Framework record as of 2 Nov 2026 does not provide issue or expiry dates, only confirming the inactive state. As of 2 Nov 2026, no public evidence of a SOC 2 report was found for Cortical.io. As of 2 Nov 2026, no public evidence of HIPAA compliance, such as a BAA offering, was found for Cortical.io. As of 2 Nov 2026, no public evidence of a PCI DSS listing was found for Cortical.io.
- EU-US DPF - status inactive/expired as of 2 Nov 2026, no issue or expiry dates on record
- SOC 2, HIPAA - no public evidence found (as of 2 Nov 2026)
- PCI DSS - no public evidence found (as of 2 Nov 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 2 Nov 2026; it is regenerated whenever a row changes.
Evidence count
0verified rows
machine learningnlpsemantic searchtext analysis
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for Cortical.ioHow much of each regulation’s vendor requirements Cortical.io’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read