Summary
Twitter has , and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Twitter is listed in the EU-US Data Privacy Framework registry with an Inactive status as of 17 Sep 2026. The EU-US Data Privacy Framework registry as of 17 Sep 2026 records an original certification date of 16 Nov 2016 for Twitter. This EU-US Data Privacy Framework registry entry is expired as of 17 Sep 2026, showing an Inactive status with no current expiry date recorded. No public evidence of SOC 2, ISO/IEC 27001, or other frameworks was found for Twitter as of 17 Sep 2026. The only evidence available for Twitter as of 17 Sep 2026 relates to this single EU-US Data Privacy Framework registry entry.
- EU-US Data Privacy Framework: Inactive (expired) in registry as of 17 Sep 2026, originally certified 16 Nov 2016
- No public evidence of SOC 2, ISO/IEC 27001, or other frameworks found for Twitter as of 17 Sep 2026
- Only evidence on file for Twitter is the expired EU-US Data Privacy Framework registry entry, as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Evidence count
0verified rows
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for TwitterHow much of each regulation’s vendor requirements Twitter’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read