DataGrail
Security and trust center evidence
Powered by Vera—the complete privacy AI agent, and an unrivaled 2,500+ integrations—DataGrail solves complex privacy challenges that others
Summary
DataGrail has , and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
DataGrail is listed in the EU-US Data Privacy Framework registry with a status of 'Inactive', originally registered 21 Aug 2018, as of 17 Sep 2026. The registry record lists no expiration date for the certification, and the EU-US Data Privacy Framework listing is recorded as expired as of 17 Sep 2026. No public evidence was found for a SOC 2 Type II report for DataGrail as of 17 Sep 2026. No public evidence was found for a HIPAA business associate agreement for DataGrail as of 17 Sep 2026. No public evidence was found for PCI DSS validation for DataGrail as of 17 Sep 2026.
- EU-US Data Privacy Framework: listed in registry as 'Inactive', originally registered 21 Aug 2018, recorded as expired (as of 17 Sep 2026).
- SOC 2 Type II: no public evidence found (as of 17 Sep 2026).
- HIPAA: no public evidence found (as of 17 Sep 2026).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Sep 2026; it is regenerated whenever a row changes.
Among compliance and grc vendors
0verified rows
Category median 1, across 179 indexed compliance and grc vendors. DataGrail has no registry-verified row yet, like 48 percent of them; its evidence is vendor-stated or reported.
data mappingdata subject requestsprivacy complianceprivacy management
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Similar vendors with evidence
Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Transcend
Compliance and GRC
Transcend is the only real-time data governance and decision layer that answers “Can I use this data?” to unblock AI, agentic, and
IOR Analytics
Compliance and GRC
Data privacy, protection, and compliance professionals can finally move on from clunky spreadsheets and diagram apps to achieve
Achieved Compliance Solutions
Compliance and GRC
Achieved Compliance offers an outsourced Virtual Privacy Office solution for data privacy compliance by providing expert support and a
TrustArc
Compliance and GRC
TrustArc bridges the gap between privacy and data for deeper insights, broader access, and continuous
Evidence against regulations
All regulations for DataGrailHow much of each regulation’s vendor requirements DataGrail’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read