Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
UserTesting
Customer support
UserTesting is a platform for getting rapid customer feedback on almost any customer experience you can imagine, including websites, mobile
Valid8 Financial
Finance and accounting
Transform raw banking evidence and accounting data into evidential proof that’s complete, accurate, and ready for the courtroom or
Return Path
Marketing
Validity's AI-powered email platform is trained on the world's largest email data network, helping teams send smarter, reduce risk, and
Veracross
Education
Eliminate data chaos with the leading student information system for private & independent K-12
Very Good Security
Networking
Integrate VGS into your technology stack to streamline payment tokenization, with our comprehensive card management platform, network token
Vimeo
Media and content
The video platform trusted by 287 million creatives, entrepreneurs, and
VisibleThread
Research and data providers
Full-lifecycle RFP intelligence, traceable AI insights, and security without
zencoder
Collaboration
Discover Zencoder's AI Coding Agent Platform for seamless code execution and
Ziflow
Project management
Review and approve content faster with Ziflow, online proofing software with automated workflows, 1,200+ file types, and
Zingtree
Developer tools
Zylo
Finance and accounting
Zylo is the enterprise SaaS spend management platform trusted by leading companies to deliver visibility, cost control, and AI-powered
Canva
Design tools
Canva, Inc. is an Australian multinational software company launched in 2013
Fireflies.ai
AI assistants
Fireflies takes notes, manages tasks, and automates workflows across meetings, email, chat, CRM, and your
Glean
AI assistants
Glean is the Enterprise AI platform connected to your enterprise's
Sardine
Security
The top agentic risk platform used by leading banks and merchants worldwide to stop fraud in real-time, prevent AI-driven attacks, automate
Algolia
Developer tools
A developer-friendly and enterprise-grade search API.
Protex AI
Manufacturing and industrial
Computer vision that makes the industrial workplace, safer
Culture Amp
HR and HRIS
Empower your teams and fuel positive change with performance, development, and employee engagement tools – all-in-one intuitive employee
LangChain
AI infrastructure
LangChain is a software framework that helps facilitate the integration of large language models (LLMs) into applications
Redis
Data platforms
Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability
Typeform
Form builders and surveys
Typeform is a software as a service (SaaS) company that specializes in online form building and online surveys
checkout
Payments
Boost your acceptance rate, cut processing costs, fight fraud, and create extraordinary customer experiences with Checkout.com's payment
Citcon
Payments
Accept digital payments
EH Financial Services
Recruiting
Recruitment, HR, Payroll & Benefits in one place - designed for small & medium businesses to be efficient, compliant &
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Guides on GDPR
All articlesExplainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read