What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
AI tools
Revolv3 uses artificial intelligence to optimize our payment processing
Business services
Ruddr is the modern professional services
Data platforms
We help organizations do more with their
Translation and localization
Unsafe content identification SaaS, a simple REST API identifies malware, inappropriate images and language
Research and data providers
SciSure lab management software connects ELN, LIMS, lab operations, and EHS in one system to streamline research workflows and support
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Business services
Sembly â agentic AI platform for professional
Communications and CPaaS
Build AI voice agents, contact centers, and unified communications on one programmable
Collaboration
Sign In Solutions, Inc., headquartered in Florida, USA, is a global provider of cloud-based visitor management and workplace risk
Marketing
Simon AI is the Agentic Marketing platform trusted by enterprise
Developer tools
WCAG 2.1, 2.2, EAA, Website Accessibility Services including manual audit, website, PDF / doc remediation, VPAT ACR, Consulting for any
Recruiting
Spark Hire is the hiring software that combines a powerful ATS with our industry-leading video interviews and behavioral
spin.ai
Founded in 2017 and Headquartered in Palo Alto, Spin.AI delivers the most innovating last line of cyberdefense, SaaS data management, and
Developer tools
StarCompliance Enterprise simplifies conflict monitoring and regulatory compliance, helping firms reduce risk and stay ahead with
Real estate and property
We enable student housing providers to manage every aspect of living both, on- and off campus, through a single unified
IT management
Tamr's real-time AI-native MDM platform unifies, cleans, and enriches records to power AI initiatives, decision-making, and operations with
No-code and automation
TeamDynamix is a no-code AI ITSM
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
Collaboration
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
Payments
Thredd is the AI-first issuer processing platform for prepaid, debit, credit, and virtual card
DevOps and observability
Accelerate software testing to keep pace with Agile and DevOps - with the industry's most innovative automated software testing
No-code and automation
UnqorkAI helps organizations build and operate AI-generated applications with greater control, predictability, and
upcell.io
Form builders and surveys
Remote user testing with
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Solomon Amos · 2 Nov 2026 · 10 min read
Solomon Amos · 29 Oct 2026 · 9 min read