Summary
Lasso Technologies has 1 vendor-stated row, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 vendor-stated row and 1 expired row for Lasso Technologies, drawn from its trust centre (Vanta) and the Data Privacy Framework list. Lasso Technologies states on its trust centre that it holds a SOC 2 Type II report, captured 21 Sep 2026; these are vendor statements, not independent confirmations. Lasso Technologies previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 2 Nov 2026. No public evidence was found for ISO/IEC 27001, HIPAA, GDPR and PCI DSS as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- SOC 2: Vendor states SOC 2 on its trust centre, vendor-stated as of 21 Sep 2026
- EU-US Data Privacy Framework: Inactive, expired as of 2 Nov 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Evidence count
0verified rows
Compliance grid
Legal artefacts
Subprocessors (13)
Amazon Web ServicesCloud provider · United States
CloudflareCloud monitoring- DatadogCloud monitoring · United States
- ITIRS TIN MatchingTax identification number verification (U.S. only) · United States
OpenAIEngineering · United States
PayPalPayout processing to partners · United States
PostHogAnalytics · United States
RenderCloud provider · United States- SendGridTransactional and marketing email delivery · United States
SentryCloud monitoring · United States
TremendousPayout processing to partners · United States
VantaSecurity- WIWiseBank transfer payouts to partners · United Kingdom
Security profile
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: CloudflareCloudflare appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: DatadogDatadog appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: IRS TIN MatchingIRS TIN Matching appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: OpenAIOpenAI appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: PayPalPayPal appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: PostHogPostHog appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: RenderRender appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: SendGridSendGrid appeared on the subprocessor list.
Evidence against regulations
All regulations for Lasso TechnologiesHow much of each regulation’s vendor requirements Lasso Technologies’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read