Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
IT management
Tamr's real-time AI-native MDM platform unifies, cleans, and enriches records to power AI initiatives, decision-making, and operations with
No-code and automation
TeamDynamix is a no-code AI ITSM
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
Collaboration
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
Payments
Thredd is the AI-first issuer processing platform for prepaid, debit, credit, and virtual card
DevOps and observability
Accelerate software testing to keep pace with Agile and DevOps - with the industry's most innovative automated software testing
upcell.io
Form builders and surveys
Remote user testing with
Customer support
UserTesting is a platform for getting rapid customer feedback on almost any customer experience you can imagine, including websites, mobile
Marketing
Validity's AI-powered email platform is trained on the world's largest email data network, helping teams send smarter, reduce risk, and
Networking
Integrate VGS into your technology stack to streamline payment tokenization, with our comprehensive card management platform, network token
Media and content
The video platform trusted by 287 million creatives, entrepreneurs, and
Collaboration
Discover Zencoder's AI Coding Agent Platform for seamless code execution and
Project management
Review and approve content faster with Ziflow, online proofing software with automated workflows, 1,200+ file types, and
Developer tools
Finance and accounting
Zylo is the enterprise SaaS spend management platform trusted by leading companies to deliver visibility, cost control, and AI-powered
Design tools
Canva, Inc. is an Australian multinational software company launched in 2013
HR and HRIS
Empower your teams and fuel positive change with performance, development, and employee engagement tools – all-in-one intuitive employee
AI assistants
Fireflies takes notes, manages tasks, and automates workflows across meetings, email, chat, CRM, and your
AI assistants
Glean is the Enterprise AI platform connected to your enterprise's
AI infrastructure
LangChain is a software framework that helps facilitate the integration of large language models (LLMs) into applications
Data platforms
Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability
Security
The top agentic risk platform used by leading banks and merchants worldwide to stop fraud in real-time, prevent AI-driven attacks, automate
Form builders and surveys
Typeform is a software as a service (SaaS) company that specializes in online form building and online surveys
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Solomon Amos · 29 Oct 2026 · 9 min read