Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Soroco Americas Private
soroco.com
Scout is the only platform that observes humans and agents operating together, then simulates the consequences of any workflow change on
Split
Developer tools
Split.io feature flags connects critical impact data and alerts you whether your software changes are making things better or
StudyStash
Education
StudyStash: ethical, AI-powered adaptive learning built on neuroscience to improve outcomes for students, universities and
Submittable
Nonprofit and fundraising
The best way to launch, manage and measure social impact programs
Syncron
syncron.com
Enhance spare parts availability and profitability with Syncron's solutions, driving growth and customer satisfaction in aftermarket
Taskworld
Collaboration
Taskworld is a cloud-based collaboration platform created by Fred Mouawad
Team Engine
Recruiting
Simplify recruitment, retention, and engagement with Team Engine's AI-powered automation for communication with your field
UserGems
Sales tools
The AI Command Center for outbound and ABM
Workshop Software
useworkshop.com
Workshop is the best internal communications email software to create, send, & measure branded internal comms & employee
Whimsical
Design tools
Design and document implementation with
XOi Technologies
xoi.io
XOi captures field data, enriches it with AI, and connects it to your systems so every asset tells a complete
Yembo
Insurance
Yembo turns a smartphone video of an interior into a 3D digital clone with semantic understanding, for property inspection in moving and
Descript
Media and content
Descript is the AI video and audio editor that makes editing as easy as editing
Lovable
Developer tools
Lovable is a Swedish vibe coding platform and company
Neon
Data platforms
The backend for apps and
Statsig
Developer tools
Statsig is your modern product development platform, with an integrated toolkit for experimentation, feature management, product analytics
AthenaHQ
Marketing
Be the Answer in AI Search - AI SEO across SEO, GEO & AEO
Paragon
Developer tools
The embedded integration platform for SaaS apps.
Double
Finance and accounting
We make software for bookkeepers.
Teleport
Security
The Infrastructure Identity Company
Retell AI
AI tools
Supercharge Your Contact Center Operations with AI Phone Agents
Close
Sales tools
CRM and sales automation suite
Legora
AI tools
The agentic operating system for legal work
Antigen
AI tools
Continuous offensive security for the enterprise.
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.