Nexthink
Security and trust center evidence
Nexthink is the leader in digital employee experience management
Summary
Nexthink has 3 registry-verified rows in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP In Process. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Nexthink shows a FedRAMP status of In Process, with Schellman Compliance, LLC named as the assessor, as of 18 Oct 2026. Nexthink is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) issued 30 Jun 2021, as of 19 Oct 2026. Nexthink is listed in the EU-US Data Privacy Framework registry as active for EU-US Certification, UK Extension Certification, and SW-US Certification, issued 31 Oct 2023 and expiring 2 Oct 2027, as of 19 Oct 2026. No public evidence found for SOC 2 as of 19 Oct 2026, so no SOC 2 Type II report is confirmed. No public evidence found for PCI DSS as of 19 Oct 2026, so no PCI DSS listing is confirmed.
- FedRAMP: In Process, assessor Schellman Compliance, LLC (as of 18 Oct 2026)
- CSA STAR: Level 1 self-assessment (CAIQ), issued 30 Jun 2021 (as of 19 Oct 2026)
- EU-US DPF: active, issued 31 Oct 2023, expires 2 Oct 2027 (as of 19 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Oct 2026; it is regenerated whenever a row changes.
Among it management vendors
3verified rows
Category median 1, across 53 indexed it management vendors. Nexthink has more verified rows than 92 percent of them.
digital employee experienceendpoint analyticsit monitoringworkplace analytics
Compare with similar vendors
Pick your own comparisonCompliance grid
- FedRAMPVerified
FedRAMP In Process
as of 2 Nov 202647 sources · Schellman Compliance, LLC - CSA STARVerified
STAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 2 Nov 20263 sources
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 19 Oct 2026EU-US Data Privacy Framework state changedState moved from Expired to Verified.
- 5 Oct 2026EU-US Data Privacy Framework state changedState moved from Verified to Expired.
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the IT management category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
ScienceLogic
IT management
ScienceLogic is a leader in IT Operations Management, providing modern IT operations with actionable insights to predict and resolve
Lakeside Software
IT management
Get end-to-end visibility across complex IT environments with the best data to enhance proactive IT, root cause analysis, and digital
ServiceNow
IT management
ServiceNow delivers digital workflows that create great experiences and unlock productivity for employees and the
Omnissa
IT management
Omnissa is the digital work platform leader, trusted by thousands of organizations worldwide as the former VMware End-User Computing
Evidence against regulations
All regulations for NexthinkHow much of each regulation’s vendor requirements Nexthink’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read