Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
Data platforms
Automating manual and repetitive data engineering tasks with AI
Compliance and GRC
Datasaur builds private AI/agents for enterprise/government
AI tools
A better data science notebook.
AI tools
Unified DevSecOps platform, helping developers ship good code.
Finance and accounting
Manage all your corporate spending with dice and make daily business operations fast and
HR and HRIS
Health disclosure and accommodation management platform
AI tools
The data layer for physical AI
AI tools
AI-Powered ERP, MES, and Test Software for Complex Operations
Insurance
AI Workforce for the Insurance Industry
Developer tools
Open source feature flagging and A/B testing
HR and HRIS
Your personalised benefits and engagement platform for global teams
HR and HRIS
AI-Powered HRIS for high performing teams
Developer tools
Design and explain complex software architecture.
HR and HRIS
AI to engage employees, predict attrition and automate HR/IT support
Developer tools
Shift FinOps Left: Proactively Find & Fix Cloud Cost Issues
Developer tools
Give engineering, product, and design teams insight into unseen issues
HR and HRIS
Making it easy for employees to donate and volunteer with good causes.
Recruiting
Unified API for HR, payroll and recruiting software
AI tools
Open-source, serverless vectordb for production-scale generative AI
AI tools
Turn Your Taste Into Hires
Finance and accounting
The Unified AI-ERP & FP&A Platform
Developer tools
The Memory layer for AI Agents
Developer tools
Automated e2e screenshot testing without writing or maintaining tests
Finance and accounting
The AI for Financial Services.
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Solomon Amos · 29 Oct 2026 · 9 min read