Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Linkby
linkby.com
Loyalty Juggernaut
Research and data providers
Agentic AI, real-time experiences, ecosystem-scale
Luminance
Legal tech
End-to-End AI for Every Contract
magicplan
Real estate and property
Restoration workflow software that connects field to office
Magic School
Education
Transform teaching and learning with an AI platform built for school
MedaSystems
Healthcare
A cloud platform empowering global expanded and managed access
Meltwater News
Research and data providers
Turn media monitoring, social listening and AI signals into actionable intelligence with
MentorcliQ
HR and HRIS
Explore #1 mentoring and ERG platform driving retention, development, and engagement at global
Merge API
Developer tools
Merge is the infrastructure layer for production
Meridian AI
meridian-ai.com
Meridian AI empowers private equity & private credit firms to source deals thematically, manage more efficient pipelines, and make better
Nango
Developer tools
A single API for all your integrations
NetRoadshow
netroadshow.com
NetScout Systems
DevOps and observability
Drive observability, cybersecurity, DDoS protection, and AIOps initiatives with NETSCOUT's AI-ready data
NimbleWork
Analytics
NimbleWork is a leading B2B SaaS provider of collaborative AI-powered Adaptive Work and Project Management products and
Nuix
Analytics
Nuix Ltd is an Australian technology company that produces investigative analytics and intelligence software for extracting knowledge from
Optii Solutions
No-code and automation
Improve hotel operations and reduce costs with one intuitive
Origami Risk
Compliance and GRC
Origami Risk delivers purpose-built risk, safety, and insurance software to streamline compliance, claims, and operations, all on a
RSA Security
Security
Outseer delivers all-cause fraud prevention using predictive AI, real-time behavioral biometrics, and global consortium data—detecting and
Centavo
DevOps and observability
Payabli delivers payment infrastructure through a single unified API, enabling software platforms to embed, manage, and scale
Pay One
payone.io
Home Page - PayOne | One
PCI Pal
Communications and CPaaS
Secure contact center payments, boost CX, and achieve PCI
PhotoCircle
Productivity
PhotoCircle® is a secure media-sharing platform for families, social groups, schools, nonprofits, and businesses to easily connect, share
PixieBrix
pixiebrix.com
For customer care operations teams: see every agent action in the browser, intervene in real time before problems become real, and enforce
Posit Software PBC
Developer tools
Posit is the enterprise data science platform trusted by 52 of the Fortune
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.