Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Mews Systems
Travel and hospitality
Mews is a cloud-based hospitality management software trusted by 15,000+ properties to automate operations, boost revenue & power the guest
Cora Systems
Project management
Streamline your projects with Cora Systems' enterprise project portfolio management
Wingspan Networks
Compliance and GRC
Wingspan runs onboarding, payments, compliance, and tax filing for 1099 contractors, international contractors, and contingent W-2
Bird
Communications and CPaaS
The world’s largest omnichannel communications platform
Valence
HR and HRIS
Valences AI Powered Leadership Coach allows enterprises to offer executive level coaching at
Edge
Legal tech
The ultimate IP assistant.
ClickUp
Project management
Our mission is to make the world more
Delinea
Identity and access
Try Delinea's AI-driven identity security, authorization and PAM solutions to secure privileged access across your organization in real
Lattice
HR and HRIS
Modern people management platform.
RE
Resend
Communications and CPaaS
Email for developers
Ambassador
getambassador.com
Grow, keep, and prove revenue from the customers you already
Retool
Developer tools
Build internal tools fast.
Vapi
AI tools
Voice AI for developers.
Dashlane
Identity and access
Top-rated password manager and credential protection solution for enterprises, businesses, and
Segment
Data platforms
Software and APIs to collect, clean, and control customer data.
WeTransfer
Cloud storage
The simple, quick and secure way to send your files around the world without an
Anaconda
Analytics
Anaconda is the trusted foundation for AI-native
Jitterbit
No-code and automation
Ignite business productivity with data orchestration, iPaaS, workflow automation, and low-code app development solutions—all on one unified
Notion
Collaboration
Build Custom Agents, search across all your apps, and automate
Vela
Recruiting
AI Recruiting Coordinator for Executive Search
Unanet
CRM
Unanet’s ERP and CRM solutions drive bottom-line growth by connecting your projects, people and financials with greater efficiency and
Yoodli
Sales tools
Enterprise AI roleplay platform for sales enablement, partner training, and
15Five
HR and HRIS
15Five is the performance management platform that creates effective managers, highly engaged employees, and top-performing
ActivTrak
Research and data providers
ActivTrak’s work intelligence helps leaders understand how work gets done across people, tools and
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Guides on GDPR
All articlesExplainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read