Security and trust center evidence
Use WhatsApp Messenger to stay in touch with friends and
Summary
WhatsApp has 1 registry-verified row in the CertReports index, last verified 26 Oct 2026. The strongest row is EU-US Data Privacy Framework: Active: SW-US Certification, EU-US Certification. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
WhatsApp is listed in the EU-US Data Privacy Framework registry as active for the EU-US Certification and the Swiss-US Certification, as of 17 Sep 2026. The certification was issued 24 Jan 2022 and is set to expire 23 Jan 2027, per the registry as of 17 Sep 2026. No public evidence found for SOC 2, ISO/IEC 27001, or GDPR as of 19 Sep 2026. No public evidence found for HIPAA or PCI DSS as of 19 Sep 2026. No public evidence found for FedRAMP or CSA STAR as of 19 Sep 2026.
- Listed in EU-US Data Privacy Framework registry as active (EU-US, Swiss-US Certifications), issued 24 Jan 2022, expires 23 Jan 2027 (as of 17 Sep 2026).
- No public evidence found for SOC 2, ISO/IEC 27001, GDPR, HIPAA, or PCI DSS.
- No public evidence found for FedRAMP or CSA STAR.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among collaboration vendors
1verified rows
Category median 1, across 95 indexed collaboration vendors. WhatsApp has more verified rows than 42 percent of them.
instant messagingmessagingmobile communicationvoice calling
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 1 framework entered the index.
Similar vendors with evidence
Related by product tags and the Collaboration category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Conversocial
Collaboration
Deliver conversational customer experiences across private messaging apps like WhatsApp, Facebook Messenger, and Apple Messages for
Cerulean Studios
Collaboration
Trillian is easy-to-use, HIPAA-compliant instant messaging for people, business, and
Inteliquent
Collaboration
Inteliquent is a communications enabler offering network-based voice and messaging services to wireless, cable, carriers and communication
Discord
Collaboration
Discord is great for playing games and chilling with friends, or even building a worldwide
Evidence against regulations
All regulations for WhatsAppHow much of each regulation’s vendor requirements WhatsApp’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read