Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
E-commerce
Gladly brings agentic commerce to your site for premium ecommerce
Customer support
Drive more sales and automate support with AI Agent, Helpdesk integrated to your stack, Chat, FAQ and
Productivity
Track employee time, monitor productivity, and turn approved hours into payments and
Analytics
Research and data providers
Explore Life Science Software solutions that drive discovery and accelerate research with Instem's innovative SaaS
Analytics
Optimize Agent Actions with User
Finance and accounting
Digital and reporting solutions for investment
Collaboration
Modo unifies digital life across campus and workplace—on mobile or desktop—with the leading campus experience app and workplace experience
newforma.com
Newforma centralizes your files, emails, and conversations into one connected information management platform for full AEC project
Logistics and supply chain
Optimize your dispatch and effortlessly manage your routes with Onfleet, the #1 last-mile delivery software for couriers and delivery
Sales tools
PartnerStack is a full stack solution for partnerships.
Government and public sector
Learn how Priority Dispatch Corporation's Priority Dispatch System makes Emergency Dispatch safer, more efficient, and more
Scheduling
QLess streamlines queues, reduces wait times, and enhances customer experiences with smart queue management
quantexa.com
Connect fragmented data to reveal real-world relationships so humans and AI can make trusted decisions at
Cloud storage
Store, manage, and simplify all your unstructured data and hybrid workflows in one platform, anywhere - at the edge, in the core, or in any
rainfocus.com
Discover RainFocus, the premier event management software designed to accelerate growth and
Scheduling
Reclaim is an AI-powered app that creates 40% more time for teams — auto-schedule tasks, habits, meeting & breaks – free on Google Calendar
Developer tools
One platform for the extended workforce: permanent, contingent, and
Developer tools
AI-native on-call and incident response carefully crafted to help…
No-code and automation
Automate personalized gifting campaigns to drive
Security
SEON's fraud prevention platform unifies real-time detection and AML in one
shelf.io
Eliminate bad data before it becomes the wrong
Scheduling
Schedule and manage your deskless workforce, resolve conflicts, optimize travel, and more with our powerful scheduling app and mobile
Developer tools
Maintain control as development
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Solomon Amos · 29 Oct 2026 · 9 min read