Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
Procurement
Optimize cash flow & working capital with PrimeRevenue’s supply chain finance platform trusted by enterprises & their suppliers
Developer tools
Prisma gives TypeScript and Node.js teams Prisma ORM, Prisma Postgres, and Prisma Compute: a type-safe ORM, managed Postgres, and Compute
Manufacturing and industrial
Computer vision that makes the industrial workplace, safer
Collaboration
Build thriving teams with Quantum Workplace's HR
AI tools
Enterprise Deepfake Detection
HR and HRIS
Recognize builds recognition programs that get adopted by managers and staff alike, across offices, remote teams, and frontline
reelist.com
The talent you’re looking for is on
Sales tools
Revenue Intelligence platform that automatically captures sales activities to help you identify and fix revenue
AI tools
Revolv3 uses artificial intelligence to optimize our payment processing
Business services
Ruddr is the modern professional services
Data platforms
We help organizations do more with their
Translation and localization
Unsafe content identification SaaS, a simple REST API identifies malware, inappropriate images and language
Research and data providers
SciSure lab management software connects ELN, LIMS, lab operations, and EHS in one system to streamline research workflows and support
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Business services
Sembly â agentic AI platform for professional
Communications and CPaaS
Build AI voice agents, contact centers, and unified communications on one programmable
Collaboration
Sign In Solutions, Inc., headquartered in Florida, USA, is a global provider of cloud-based visitor management and workplace risk
Marketing
Simon AI is the Agentic Marketing platform trusted by enterprise
Developer tools
WCAG 2.1, 2.2, EAA, Website Accessibility Services including manual audit, website, PDF / doc remediation, VPAT ACR, Consulting for any
Recruiting
Spark Hire is the hiring software that combines a powerful ATS with our industry-leading video interviews and behavioral
spin.ai
Founded in 2017 and Headquartered in Palo Alto, Spin.AI delivers the most innovating last line of cyberdefense, SaaS data management, and
Developer tools
StarCompliance Enterprise simplifies conflict monitoring and regulatory compliance, helping firms reduce risk and stay ahead with
Real estate and property
We enable student housing providers to manage every aspect of living both, on- and off campus, through a single unified
Sales tools
Supered turns the sales process you wrote into the standard every rep actually runs, inside HubSpot and
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Solomon Amos · 29 Oct 2026 · 9 min read