Workiva

Workiva's EU-US Data Privacy Framework registry entry is marked inactive, with the original certification dated 21 Oct 2016, as of 26 Oct 2026. This means the Data Privacy Framework listing for Workiva has expired as of 26 Oct 2026. No public evidence was found for SOC 2, PCI DSS, HIPAA or ISO/IEC 27001 as of 26 Oct 2026. The only framework evidence supplied for Workiva in this record is the expired Data Privacy Framework entry, as of 26 Oct 2026. Reviewers should note the expired status explicitly rather than inferring any broader compliance position, as of 26 Oct 2026.

• EU-US Data Privacy Framework: registry status inactive, originally certified 21 Oct 2016, now expired (as of 26 Oct 2026)
• No public evidence found for SOC 2 or PCI DSS as of 26 Oct 2026
• No public evidence found for HIPAA or ISO/IEC 27001 as of 26 Oct 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.