ZAP

ZAP's only public compliance evidence on file is an EU-US Data Privacy Framework registry entry, which the Data Privacy Framework registry lists as Inactive as of 17 Sep 2026. That Data Privacy Framework registry entry records an original certification date of 28 Jan 2018, but the entry has since expired and is no longer active as of 17 Sep 2026. No public evidence was found for SOC 2 as of 19 Sep 2026. No public evidence was found for ISO/IEC 27001 as of 19 Sep 2026. No public evidence was found for HIPAA as of 19 Sep 2026, so no BAA availability can be confirmed for ZAP.

• EU-US Data Privacy Framework: registry lists ZAP as Inactive (expired), originally issued 28 Jan 2018, as of 17 Sep 2026.
• SOC 2: no public evidence found, as of 19 Sep 2026.
• ISO/IEC 27001 and HIPAA: no public evidence found, as of 19 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.