Envoy

As of 17 Sep 2026, Envoy is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) issued 16 Oct 2025. As of 17 Sep 2026, Envoy is listed in the EU-US Data Privacy Framework registry as Active, covering EU-US Certification, UK Extension Certification, and SW-US Certification, originally issued 23 Oct 2018 and set to expire 04 Sep 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for Envoy. As of 17 Sep 2026, no public evidence found for HIPAA or a BAA offering for Envoy. As of 17 Sep 2026, no subprocessor evidence was found in the rows provided for Envoy.

• CSA STAR: listed in CSA STAR registry, STAR Level 1 self-assessment (CAIQ), issued 16 Oct 2025 (as of 17 Sep 2026)
• EU-US Data Privacy Framework: listed in DPF registry as Active (EU-US, UK Extension, SW-US Certifications), issued 23 Oct 2018, expires 04 Sep 2027 (as of 17 Sep 2026)
• SOC 2 and HIPAA: no public evidence found for Envoy (as of 17 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.