ESRI

As of 17 Sep 2026, ESRI is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 20 Aug 2015 and audited by Coalfire Systems, Inc. As of 17 Sep 2026, ESRI is listed in the EU-US Data Privacy Framework registry as Active, covering UK Extension, EU-US, and SW-US Certifications, originally issued 07 Feb 2017 and set to expire 03 Nov 2026. As of 17 Sep 2026, no evidence of expiration has occurred for the EU-US Data Privacy Framework listing, though the 03 Nov 2026 expiry date should be monitored. As of 17 Sep 2026, no public evidence found for SOC 2 for ESRI. As of 17 Sep 2026, no public evidence found for HIPAA for ESRI.

• FedRAMP: listed in FedRAMP registry as FedRAMP Authorized, issued 20 Aug 2015, audited by Coalfire Systems, Inc. (as of 17 Sep 2026)
• EU-US Data Privacy Framework: listed in DPF registry as Active (UK Extension, EU-US, SW-US Certifications), issued 07 Feb 2017, expires 03 Nov 2026 (as of 17 Sep 2026)
• SOC 2 and HIPAA: no public evidence found (as of 17 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.