Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 1 Nov 2026
Within
AI tools
Company Brain for people and agents to work in harmony.
Worklytics
HR and HRIS
Analytics to improve how teams work and collaborate
zeroheight
Developer tools
The design system layer for coding agents
Zuddl
Video conferencing
Zuddl is a modular platform for events and webinars that helps event…
Ably
Cloud and hosting
Coud-based realtime messaging and AI infrastructure platform
Auth0
Identity and access
Secure users, AI agents, and more with Auth0, an easy-to-implement, scalable, and adaptable authentication and authorization
Clay
Sales tools
Infrastructure to get any data, run agentic workflows, and launch GTM
Clio
Legal tech
Fireworks AI
AI infrastructure
Fireworks’ state of the art training and inference platform take you beyond the frontier, transforming open models into your specialized
Groq
AI infrastructure
Groq, Inc. is an American artificial intelligence (AI) company that builds an AI accelerator application-specific integrated circuit (ASIC)
Linear
Project management
Purpose-built for planning and building products with AI
n8n
No-code and automation
n8n is a workflow automation platform and the Berlin company, n8n GmbH, that develops it
Pinecone
AI infrastructure
Software business, developer of cloud-native vector database technology
Sanity
Developer tools
Sanity is the back-end built for AI content
Synthesia
AI tools
Synthesia Limited is a British multinational artificial intelligence company based in London, United Kingdom
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.