Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 1 Nov 2026
Forcepoint
Security
Forcepoint is a global data security leader headquartered in Austin, Texas, delivering AI-native protection for sensitive data across
Outreach
Sales tools
Outreach provides a Software as a Service (SaaS) sales acceleration
BigCommerce
E-commerce
BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to
Neo4j
Data platforms
Neo4j is a graph database management system developed by Neo4j
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
Veracode
Security
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven
Brightcove
Media and content
Brightcove Inc. (NASDAQ: BCOV) was established in 2004 and is a leading global provider of powerful cloud solutions for delivering and monetizing video ac...
iCIMS
Recruiting
The iCIMS Talent Cloud is a cloud-based talent acquisition platform that helps organizations to attract, engage, and hire the best
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
Marqeta
Finance and accounting
Transform your business with Marqeta's modern card issuing
VTEX
E-commerce
Modernize your stack and drive operational results with an AI-Native unified commerce
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Zello
Communications and CPaaS
Zello is what work sounds
Accesso
Developer tools
accesso provides revenue-driving virtual queuing technology and innovative point-of-sale and ticketing software to top attractions around
CircleCo
Collaboration
Build a home for your community, events, and courses — all under your own
Gigs
HR and HRIS
The OS for Embedded Telecom
LexisNexis Risk Solutions
lexisnexis.com
Mark43
Government and public sector
Mark43’s product suite is a commercial-of-the-shelf (COTS) cloud-native Software-as-a-Service (SaaS) platform that provides modern CAD and
ElevenLabs
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Strada
Insurance
AI agents that run insurance operations
Verint
Customer support
Close the AI outcomes gap with the Verint Open
Expel
Security
Expel provides leading managed detection and response services to thwart cyber adversaries from disrupting your business and improve your
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.