Skip to main content
Dexcom logo

Dexcom

Security and trust center evidence

dexcom.usLast verified 1 Nov 2026
Vendor website Are you Dexcom?

Summary

FedRAMP mark, CertReports state Verified as of 1 Nov 2026FedRAMPVerifiedEU-US Data Privacy Framework mark, CertReports state Expired as of 26 Oct 2026DPFExpired

Dexcom has 1 registry-verified row, and 1 expired in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Dexcom is listed in the FedRAMP registry with a status of 'FedRAMP In Process', as of 25 Sep 2026. The FedRAMP registry record names Schellman Compliance, LLC as the assessor for Dexcom, as of 25 Sep 2026. Dexcom is also listed in the EU-US Data Privacy Framework registry with a status of 'Inactive', originally registered 22 Mar 2017, as of 17 Sep 2026. The EU-US Data Privacy Framework registry record lists no expiration date for the certification, and the listing is recorded as expired as of 17 Sep 2026. No public evidence was found for a SOC 2 Type II report or a HIPAA business associate agreement for Dexcom as of 25 Sep 2026.

  • FedRAMP: listed in registry as 'FedRAMP In Process', assessor Schellman Compliance, LLC (as of 25 Sep 2026).
  • EU-US Data Privacy Framework: listed in registry as 'Inactive', originally registered 22 Mar 2017, recorded as expired (as of 17 Sep 2026).
  • SOC 2 Type II / HIPAA: no public evidence found (as of 25 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Sep 2026; it is regenerated whenever a row changes.

Evidence count

1verified rows

continuous glucose monitoringdiabetes managementmedical devicesremote patient monitoring

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Change history

  1. 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.

Evidence against regulations

All regulations for Dexcom

How much of each regulation’s vendor requirements Dexcom’s public evidence reaches.

Reviewing a vendor on public evidence

All articles