Summary
LLamasoft has 2 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, LLamasoft (coupa.com) is listed in the FedRAMP registry as 'FedRAMP Authorized', with authorization issued on 10 Mar 2022 and audited by Schellman Compliance, LLC. As of 17 Sep 2026, the FedRAMP registry entry does not show an expiration date. As of 17 Sep 2026, LLamasoft is listed in the EU-US Data Privacy Framework registry as Active, covering SW-US Certification, EU-US Certification, and UK Extension Certification, issued 19 Dec 2023 and expiring 26 Dec 2026. As of 17 Sep 2026, no public evidence found for SOC 2. As of 17 Sep 2026, no public evidence found for HIPAA.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.
Evidence count
2verified rows
procurement analyticsspend managementsupplier managementsupply chain visibility
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports4 evidence rows across 2 frameworks entered the index.
Evidence against regulations
All regulations for LLamasoftHow much of each regulation’s vendor requirements LLamasoft’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read