Zones

Zones' EU-US Data Privacy Framework entry, as of 12 Oct 2026, is marked inactive in the registry, reflecting a certification that was originally issued on 20 Nov 2024 and has since lapsed without a listed renewal or expiration date. No public evidence found for PCI DSS as of 12 Oct 2026. No public evidence found for SOC 2 as of 12 Oct 2026. No public evidence found for ISO/IEC 27001 as of 12 Oct 2026. No public evidence found for a HIPAA BAA as of 12 Oct 2026.

• EU-US Data Privacy Framework: inactive, originally issued 20 Nov 2024 (as of 12 Oct 2026)
• PCI DSS / SOC 2 / ISO/IEC 27001: no public evidence found (as of 12 Oct 2026)
• HIPAA: no public evidence found for a BAA (as of 12 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 13 Oct 2026; it is regenerated whenever a row changes.