Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Zello
Communications and CPaaS
Zello is what work sounds
Accesso
Developer tools
accesso provides revenue-driving virtual queuing technology and innovative point-of-sale and ticketing software to top attractions around
CircleCo
Collaboration
Build a home for your community, events, and courses — all under your own
Evervault
Compliance and GRC
Evervault specializes in data encryption and confidential computing, helping customers address data security and compliance across various
Fleetio
Automotive and mobility
We provide the comprehensive solutions and resources needed to run, repair and optimize vehicles and assets, so fleets gain control of
Form Assembly
Form builders and surveys
Collect clean, compliant data with FormAssembly's secure web
Gigs
HR and HRIS
The OS for Embedded Telecom
Grafana Labs
DevOps and observability
Grafana has become the world’s most popular technology used to compose observability dashboards with everything from Prometheus & Graphite
HIghRadius
Finance and accounting
World's #1 Autonomous Finance Platform to lower DSO, optimize working capital, fast-track financial close and improve
Hyland Software
Cloud storage
Hyland provides industry-leading technology foundations that empower its customers to create better human
Introhive
Research and data providers
Introhive is a Relationship Intelligence Platform that empowers firms to automate CRM data entry, enrich and maintain CRM data quality, and
JAMF Software
IT management
Jamf is a global provider of organization cloud-based mobile device management (MDM) hosting services that allow organizations to off-load
LexisNexis Risk Solutions
lexisnexis.com
Localize
Translation and localization
Localize is a cloud-based translation management system that enables companies to bring their products to multilingual international
MacStadium
Cloud and hosting
As the industry-leading Mac private cloud and software-as-a-service provider enabling macOS workloads, MacStadium has been solely focused
PARTECH
Scheduling
Modern restaurant tech that unifies POS, management tools, & scheduling software—helping restaurants streamline operations, cut chaos, and
PayQuicker
payquicker.com
Reveal Data
AI tools
Reveal provides world-class document review technology, underpinned by leading processing, visual analytics, and artificial intelligence
Seismic Software
Sales tools
Seismic Software is a global leader in AI-powered sales enablement, providing a unified enablement platform that equips customer-facing
Sertifi
E-signature
Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract
Sybill
Sales tools
Sybill is the AI revenue intelligence platform trusted by 750+ revenue teams to turn every customer conversation into CRM data
Syndio Solutions
HR and HRIS
Truly equitable workplaces get two things right: fair pay and equal access to
ElevenLabs
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Gong
Sales tools
Gong Revenue AI OS helps your entire GTM organization
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.