TrueVault
Security and trust center evidence
We make Privacy Software for SMBs.
Summary
TrueVault has 1 registry-verified row in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Active: EU-US Certification, SW-US Certification, UK Extension Certification. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 05 Oct 2026, TrueVault is listed in the EU-US Data Privacy Framework registry with an active status covering the EU-US Certification, the SW-US Certification and the UK Extension Certification. The EU-US Data Privacy Framework registry entry for TrueVault shows an issue date of 08 Sep 2017 and an expiry date of 14 Apr 2027, as of 05 Oct 2026. As of 05 Oct 2026, no public evidence found for a SOC 2 Type II report for TrueVault. As of 05 Oct 2026, no public evidence found that TrueVault offers a BAA for HIPAA. As of 05 Oct 2026, no public evidence found for PCI DSS validation for TrueVault.
- EU-US Data Privacy Framework: listed in DPF registry, active (EU-US, SW-US, UK Extension), issued 08 Sep 2017, expires 14 Apr 2027 (as of 05 Oct 2026).
- SOC 2 Type II: no public evidence found (as of 05 Oct 2026).
- HIPAA: no public evidence found (as of 05 Oct 2026).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.
Among compliance and grc vendors
1verified rows
Category median 1, across 179 indexed compliance and grc vendors. TrueVault has more verified rows than 47 percent of them.
consent managementcookie managementdata governanceprivacy compliance
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Similar vendors with evidence
Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Ensighten
Compliance and GRC
Ensighten has rebranded to CHEQ Control &
TrustArc
Compliance and GRC
TrustArc bridges the gap between privacy and data for deeper insights, broader access, and continuous
ObservePoint
Compliance and GRC
Automated website auditing, tag governance, and privacy compliance platform trusted by leading brands
Ecomdash
Compliance and GRC
Clarip unifies privacy governance, AI governance, and consent management in one enterprise control layer for responsible data
Evidence against regulations
All regulations for TrueVaultHow much of each regulation’s vendor requirements TrueVault’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read