Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
checkout
Payments
Boost your acceptance rate, cut processing costs, fight fraud, and create extraordinary customer experiences with Checkout.com's payment
Citcon
Payments
Accept digital payments
EH Financial Services
Recruiting
Recruitment, HR, Payroll & Benefits in one place - designed for small & medium businesses to be efficient, compliant &
Mews Systems
Travel and hospitality
Mews is a cloud-based hospitality management software trusted by 15,000+ properties to automate operations, boost revenue & power the guest
Cora Systems
Project management
Streamline your projects with Cora Systems' enterprise project portfolio management
Wingspan Networks
Compliance and GRC
Wingspan runs onboarding, payments, compliance, and tax filing for 1099 contractors, international contractors, and contingent W-2
ClickUp
Project management
Our mission is to make the world more
Lattice
HR and HRIS
Modern people management platform.
Retool
Developer tools
Build internal tools fast.
Vapi
AI tools
Voice AI for developers.
Segment
Data platforms
Software and APIs to collect, clean, and control customer data.
WeTransfer
Cloud storage
The simple, quick and secure way to send your files around the world without an
Anaconda
Analytics
Anaconda is the trusted foundation for AI-native
Jitterbit
No-code and automation
Ignite business productivity with data orchestration, iPaaS, workflow automation, and low-code app development solutions—all on one unified
Notion
Collaboration
Build Custom Agents, search across all your apps, and automate
Vela
Recruiting
AI Recruiting Coordinator for Executive Search
15Five
HR and HRIS
15Five is the performance management platform that creates effective managers, highly engaged employees, and top-performing
Cyble
Security
Cyble - World’s First Intelligence-Driven, AI-Native Security…
jwplayer
DevOps and observability
JWX helps streamers, publishers, and advertisers create, deliver, and monetize video with one intelligent workflow - built for speed
Lares
Security
Lares helps companies secure electronic, physical, intellectual, and financial assets through a unique blend of security assessment
OPSWAT
opswat.com
Vidyard
Marketing
Vidyard is an online video platform for business which allows you to increase leads, accelerate your pipeline and delight your
Applitools
No-code and automation
Applitools is an AI-powered end-to-end testing platform that combines our proven Visual AI with the latest GenAI and no-code approaches to
authzed
AI tools
Authorization Infrastructure securing AI at OpenAI, Zoom, & more
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.