Summary
Honey has , and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, the EU-US Data Privacy Framework registry lists Honey's certification as expired, showing a status of Inactive with an original listing date of 27 Aug 2018. As of 17 Sep 2026, no public evidence was found for a SOC 2 report covering Honey. As of 17 Sep 2026, no public evidence was found for ISO/IEC 27001 certification covering Honey. As of 17 Sep 2026, no public evidence was found regarding a HIPAA BAA offered by Honey. As of 17 Sep 2026, no public evidence was found for PCI DSS validation covering Honey.
- EU-US Data Privacy Framework: expired (Inactive), originally listed 27 Aug 2018, as of 17 Sep 2026.
- No public evidence found for SOC 2 or ISO/IEC 27001, as of 17 Sep 2026.
- No public evidence found for a HIPAA BAA or PCI DSS validation, as of 17 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Sep 2026; it is regenerated whenever a row changes.
Evidence count
0verified rows
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for HoneyHow much of each regulation’s vendor requirements Honey’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read