Skip to main content

legal

GDPR evidence across 471 vendors

GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.

Verified rows
0
Vendor-stated
471
Expired
0
Last verified
2 Nov 2026
Tamr logo

Tamr

IT management

Tamr's real-time AI-native MDM platform unifies, cleans, and enriches records to power AI initiatives, decision-making, and operations with

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 3 stated26 Oct 2026
TeamDynamix logo

TeamDynamix

No-code and automation

TeamDynamix is a no-code AI ITSM

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 6 stated26 Oct 2026
Tempo Software logo

Tempo Software

Project management

Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
1 verified · 8 stated26 Oct 2026
Theta Lake logo

Theta Lake

Collaboration

Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 42001 mark, CertReports state Vendor-stated
1 verified · 6 stated26 Oct 2026
Thredd UK logo

Thredd UK

Payments

Thredd is the AI-first issuer processing platform for prepaid, debit, credit, and virtual card

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-statedISO 22301 mark, CertReports state Vendor-stated
1 verified · 5 stated26 Oct 2026
Tricentis logo

Tricentis

DevOps and observability

Accelerate software testing to keep pace with Agile and DevOps - with the industry's most innovative automated software testing

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-stated
1 verified · 6 stated26 Oct 2026
upcell logo

upcell

upcell.io

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 2 stated26 Oct 2026
Userlytics logo

Userlytics

Form builders and surveys

Remote user testing with

GDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 4 stated26 Oct 2026
UserTesting logo

UserTesting

Customer support

UserTesting is a platform for getting rapid customer feedback on almost any customer experience you can imagine, including websites, mobile

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedCyber Essentials mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-stated
1 verified · 6 stated26 Oct 2026
Return Path logo

Return Path

Marketing

Validity's AI-powered email platform is trained on the world's largest email data network, helping teams send smarter, reduce risk, and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 6 stated26 Oct 2026
Very Good Security logo

Very Good Security

Networking

Integrate VGS into your technology stack to streamline payment tokenization, with our comprehensive card management platform, network token

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
1 verified · 4 stated26 Oct 2026
Vimeo logo

Vimeo

Media and content

The video platform trusted by 287 million creatives, entrepreneurs, and

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-stated
1 verified · 7 stated26 Oct 2026
zencoder logo

zencoder

Collaboration

Discover Zencoder's AI Coding Agent Platform for seamless code execution and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 4 stated26 Oct 2026
Ziflow logo

Ziflow

Project management

Review and approve content faster with Ziflow, online proofing software with automated workflows, 1,200+ file types, and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 3 stated26 Oct 2026
Zingtree logo

Zingtree

Developer tools

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 4 stated26 Oct 2026
Zylo logo

Zylo

Finance and accounting

Zylo is the enterprise SaaS spend management platform trusted by leading companies to deliver visibility, cost control, and AI-powered

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 3 stated26 Oct 2026
Canva logo

Canva

Design tools

Canva, Inc. is an Australian multinational software company launched in 2013

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 6 stated26 Oct 2026
Culture Amp logo

Culture Amp

HR and HRIS

Empower your teams and fuel positive change with performance, development, and employee engagement tools – all-in-one intuitive employee

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 42001 mark, CertReports state Vendor-statedCCPA mark, CertReports state Vendor-stated
1 verified · 6 stated26 Oct 2026
Fireflies.ai logo

Fireflies.ai

AI assistants

Fireflies takes notes, manages tasks, and automates workflows across meetings, email, chat, CRM, and your

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 3 stated26 Oct 2026
Glean logo

Glean

AI assistants

Glean is the Enterprise AI platform connected to your enterprise's

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 5 stated26 Oct 2026
LangChain logo

LangChain

AI infrastructure

LangChain is a software framework that helps facilitate the integration of large language models (LLMs) into applications

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
1 verified · 4 stated26 Oct 2026
Redis logo

Redis

Data platforms

Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
1 verified · 11 stated26 Oct 2026
Sardine logo

Sardine

Security

The top agentic risk platform used by leading banks and merchants worldwide to stop fraud in real-time, prevent AI-driven attacks, automate

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 4 stated26 Oct 2026
Typeform logo

Typeform

Form builders and surveys

Typeform is a software as a service (SaaS) company that specializes in online form building and online surveys

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
1 verified · 9 stated26 Oct 2026

Data Privacy Framework

The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).

DPA and subprocessors

"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.

All articles