Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Canto
Crypto and web3
Canto is the leading digital asset management solution for organizations
Valence
HR and HRIS
Valences AI Powered Leadership Coach allows enterprises to offer executive level coaching at
Edge
Legal tech
The ultimate IP assistant.
RE
Resend
Communications and CPaaS
Email for developers
Ambassador
getambassador.com
Grow, keep, and prove revenue from the customers you already
Dashlane
Identity and access
Top-rated password manager and credential protection solution for enterprises, businesses, and
Unanet
CRM
Unanet’s ERP and CRM solutions drive bottom-line growth by connecting your projects, people and financials with greater efficiency and
Yoodli
Sales tools
Enterprise AI roleplay platform for sales enablement, partner training, and
ActivTrak
Research and data providers
ActivTrak’s work intelligence helps leaders understand how work gets done across people, tools and
aPriori
apriori.com
Assembly
HR and HRIS
Employee recognition platform to celebrate milestones, reward contributions, and empower managers to build a culture where teams thrive
Rocket Lawyer
Productivity
Rocket Lawyer makes the law affordable and
24 7 Software
Real estate and property
Manage security, facilities, guest experience, and event operations from a single platform trusted by leading stadiums, arenas, convention
Aerospike
Data platforms
Aerospike is the real-time database for AI, trusted in the
Canoe Software
Research and data providers
Discover Canoe Intelligence. Redefining alternative investments with automated document collection and data management.
Chameleon Intelligent Tech
Analytics
Chameleon builds context on your product, identifies friction, creates in-app guidance, and monitors outcomes, so your product keeps
CodeSignal
Research and data providers
Discover the agentic skills intelligence platform that helps teams see, measure, develop, and grow skills clearly with
Crucial Data Solutions
Research and data providers
TrialKit is a unified eClinical platform with embedded intelligence that helps sponsors and CROs design, build, manage, and analyze
CultureHQ
culturehq.com
Your personal AI agent detects which stories you need, collects them from employees, and publishes them across your
Data Intensity
Business services
Data Intensity is an industry-leading Oracle managed services provider, expertly working to simplify, optimize, and transform our clients'
Digication
Education
AI-powered platform giving institutions the assessment data, accreditation evidence, and student retention signals needed to make learning
DomainTools
Research and data providers
DomainTools provides DNS-based threat intelligence covering 97% of internet
Dozuki
Education
Empower frontline workers with Dozuki Connected Worker Platform, the best in standard work instruction and training
FareHarbor
Scheduling
FareHarbor is the best online booking software for your
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.