Skip to main content
Prismic.io logo

Prismic.io

Security and trust center evidence

We're making a non-intrusive CMS that simply works on its own, as well as with other

prismic.ioDeveloper toolsLast verified 26 Oct 2026
Vendor website Are you Prismic.io?

Summary

CSA STAR mark, CertReports state Verified as of 26 Oct 2026CSA STARVerifiedEU-US Data Privacy Framework mark, CertReports state Expired as of 26 Oct 2026DPFExpired

Prismic.io has 1 registry-verified row, and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 26 Oct 2026, CertReports holds 1 registry-verified row and 1 expired row for Prismic.io, drawn from the CSA STAR registry and the Data Privacy Framework list. Prismic.io is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ)), dated 27 May 2019. Prismic.io previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 26 Oct 2026. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 26 Oct 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.

  • CSA STAR: STAR Level 1 self-assessment (CAIQ), verified as of 26 Oct 2026
  • EU-US Data Privacy Framework: Inactive, expired as of 26 Oct 2026

Facts only, each dated; nothing here is inferred, scored or advised.

Among developer tools vendors

1verified rows

Category median 0, across 220 indexed developer tools vendors. Prismic.io has more verified rows than 65 percent of them.

content delivery apicontent modelingheadless cmspage builder

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Change history

  1. 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.

Evidence against regulations

All regulations for Prismic.io

How much of each regulation’s vendor requirements Prismic.io’s public evidence reaches.

Reviewing a vendor on public evidence

All articles