Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 1 Nov 2026
ModernLoop
Productivity
ModernLoop helps teams automate and streamline recruiting operations
Navattic
AI assistants
Interactive product demos
Openlayer
AI tools
The fastest way to ship airtight AI
Opennote
Productivity
The notebook that thinks with you.
Openroll
AI tools
The AI workforce for People and Finance teams
Parahelp
AI assistants
Build an AI support agent that securely uses all your tools
Polytomic
Data platforms
No-code data syncing between your systems
SafetyKit
Compliance and GRC
AI agents for risk, compliance, and safety
Salt Security
Security
Protects organizations from getting breached through their APIs.
Sharebite
Benefits and insurance
The #1 corporate meal benefits and group ordering platform for modern
Sparkles
Design tools
Make everyone on your team an engineer
Spinach AI
AI assistants
The System of Action for Conversation Data
Spline
AI tools
Design and collaborate in multiple dimensions.
Stilta
AI tools
Agentic AI for intellectual property
TapTap Send
Payments
Send money to Africa, Asia and Latin America in
Tesorio
Finance and accounting
Tesorio is the cash flow performance platform that helps finance…
testRigor
Developer tools
Executable specifications in English for test automation
UpKeep
Manufacturing and industrial
Mobile-first software for maintenance teams.
Crunched
Productivity
Excel AI analyst for Power Users
Fini
AI tools
Fini | Automate 80% of enterprise support with AI agents
Veriad
Marketing
AI operating system for advertising
Veriff
AI tools
Veriff is a global AI-native identity platform building trust online
Warmly
Sales tools
[Acquired by HubSpot in 2026] Autonomous sales platform to auto-email…
Whalesync
Data platforms
Manage your website from your favorite tools like Airtable and Notion
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.