Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Everbridge
Compliance and GRC
Ensure the safety of your people and assets with the Everbridge comprehensive critical event and business continuity
Abnormal AI
AI tools
Abnormal AI is the leading AI-native human behavior security platform, leveraging machine learning to stop sophisticated inbound attacks
Envoy
Legal tech
We provide full-scale international legal immigration services and a proprietary online platform related to managing all employment-based
8x8
Communications and CPaaS
8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere
Docebo
Education
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
Celonis
Analytics
Celonis has one very simple goal: to analyze today’s processes to make tomorrow’s world more
Druva
Cloud storage
The Druva Data Resiliency Cloud is the only at-scale SaaS platform designed for your multi-cloud
Expensify
Finance and accounting
Expensify, Inc. is an American software company that develops an expense management system for personal and business use
Forcepoint
Security
Forcepoint is a global data security leader headquartered in Austin, Texas, delivering AI-native protection for sensitive data across
Outreach
Sales tools
Outreach provides a Software as a Service (SaaS) sales acceleration
BigCommerce
E-commerce
BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to
Neo4j
Data platforms
Neo4j is a graph database management system developed by Neo4j
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
Veracode
Security
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven
BetterCloud
IT management
BetterCloud is the first SaaS Operations Management platform, empowering IT and security teams to define, remediate, and enforce management
Brightcove
Media and content
Brightcove Inc. (NASDAQ: BCOV) was established in 2004 and is a leading global provider of powerful cloud solutions for delivering and monetizing video ac...
iCIMS
Recruiting
The iCIMS Talent Cloud is a cloud-based talent acquisition platform that helps organizations to attract, engage, and hire the best
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Beamery
Recruiting
Beamery’s Talent Operating System Attract, engage, and retain world class talent, power best in class candidate experiences, and manage the
Marqeta
Finance and accounting
Transform your business with Marqeta's modern card issuing
Subsplash
Nonprofit and fundraising
The Subsplash Platform equips churches with the best mobile apps, church management software, websites, online giving, and more to engage
VTEX
E-commerce
Modernize your stack and drive operational results with an AI-Native unified commerce
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.