Expedient
Security and trust center evidence
Expedient combines data centers, network access and managed services to deliver information technology infrastructure as a service (IaaS)
Summary
SOC 2Vendor-stated
PCI DSSVerified
CSA STARVerifiedSOC 1Vendor-statedSOC 3Vendor-stated
HITRUSTVendor-stated
DPFVerifiedExpedient has 3 registry-verified rows and 4 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Expedient's PCI DSS status is listed in the Visa Global Registry as validated through 30 Jun 2027, originally issued 8 Mar 2008 and assessed by CDW Technologies LLC, as of 26 Oct 2026. Expedient states on its trust centre that it holds SOC 2, SOC 1 Type 2, and SOC 3, as of 26 Oct 2026. Under CSA STAR, Expedient is listed with a Level 1 self-assessment (CAIQ) submitted 14 Oct 2019, as of 26 Oct 2026. For HITRUST, Expedient states on its trust centre that it holds HITRUST, as of 26 Oct 2026. Under the EU-US Data Privacy Framework, Expedient is listed as active with UK Extension, EU-US, and SW-US Certifications, issued 6 Dec 2016 and running through 18 Mar 2027, as of 26 Oct 2026.
- PCI DSS - listed in Visa Global Registry, validated through 30 Jun 2027, assessed by CDW Technologies LLC (as of 26 Oct 2026)
- SOC 2, SOC 1 Type 2, and SOC 3 - vendor states on trust centre; HITRUST also vendor-stated (as of 26 Oct 2026)
- CSA STAR - Level 1 self-assessment (CAIQ) since 14 Oct 2019; EU-US Data Privacy Framework active through 18 Mar 2027 (as of 26 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.
Among devops and observability vendors
3verified rows
Category median 1, across 193 indexed devops and observability vendors. Expedient has more verified rows than 96 percent of them.
data centersiaasinfrastructuremanaged services
Compare with similar vendors
Pick your own comparisonCompliance grid
- SOC 2Vendor-stated
Vendor states SOC 2 on its trust centre
as of 1 Nov 20268 sources - PCI DSSVerified
Listed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 26 Oct 20264 sources · CDW Technologies LLC - CSA STARVerified
STAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources - SOC 1Vendor-stated
Vendor states SOC 1 Type 2 on its trust centre
as of 1 Nov 20268 sources - SOC 3Vendor-stated
Vendor states SOC 3 on its trust centre
as of 1 Nov 20268 sources - HITRUSTVendor-stated
Vendor states HITRUST on its trust centre
as of 1 Nov 20268 sources - EU-US Data Privacy FrameworkVerified
Active: UK Extension Certification, EU-US Certification, SW-US Certification
as of 26 Oct 20261 source
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 1 Nov 2026.
Change history
- 26 Oct 2026PCI DSS auditor changedAuditor changed from Anthony Timbers LLC to CDW Technologies LLC.
- 26 Oct 2026PCI DSS renewedExpiry moved from 2027-03-31 to 2027-06-30.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from Coalfire Systems, Inc to Anthony Timbers LLC.
- 19 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-03-31.
- 17 Oct 2026BAA availability changedBAA availability moved from unknown to on_request.
- 17 Oct 2026DPA changedThe data processing agreement URL changed.
- 17 Oct 2026HITRUST evidence addedA HITRUST row entered the index with state Vendor-stated.
- 17 Oct 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
- 17 Oct 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 17 Oct 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Telefonica Global Solutions
DevOps and observability
Telefónica Global Solutions USA
Amazon
DevOps and observability
Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands
Alibaba Cloud
Cloud and hosting
Alibaba Cloud offers a integrated suite of cloud products and services that are reliable and secure, to help you build cloud
Buchanan Technologies
DevOps and observability
Buchanan is a managed IT services provider offering enterprise applications, modern workplace & infrastructure services including 24/7
Evidence against regulations
All regulations for ExpedientHow much of each regulation’s vendor requirements Expedient’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read