Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
monday.com
Project management
Monday.com Ltd. is an Israeli software company based in Tel Aviv
Navan
Travel and hospitality
Streamline your corporate travel management and expense processes in one
Sentry
DevOps and observability
Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning
Mark43
Government and public sector
Mark43’s product suite is a commercial-of-the-shelf (COTS) cloud-native Software-as-a-Service (SaaS) platform that provides modern CAD and
Intercom
Customer support
Intercom is the only helpdesk with a natively integrated AI Agent, Fin, meaning every customer conversation improves the next one, enabling
Blink
Collaboration
The mobile-first employee experience platform that connects your people, systems, and culture in one
Text
Customer support
Your support team talks to more customers than anyone in your
Vercel
Cloud and hosting
The autonomous stack for every app and
Sim
AI infrastructure
Build autonomous AI agents for enterprise systems
Alpaca
Developer tools
API-first stock and crypto brokerage platform
Otter.ai
AI assistants
Otter AI Meeting Agent supports real-time transcription, live chat, automated summaries, insights, and action
Miro
Collaboration
Speed up product development from ideation to
Railway
Cloud and hosting
Railway is a full-stack cloud for deploying web apps, servers, databases, and more with automatic scaling, monitoring, and
RingCentral
Communications and CPaaS
Power the voice of your business with RingCentral Agentic Voice AI, including AI Receptionist (AIR), AI Virtual Assistant (AVA), & AI
Palo Alto Networks
Identity and access
Protect your organization with
y
DevOps and observability
AI agents powering financial infrastructure for merchants, banks, and
Webflow
Design tools
Professional website design and publishing platform.
Amplitude
Analytics
Digital Analytics Platform
Riot
Security
Cybersecurity awareness for fast growing companies
Dialpad
Communications and CPaaS
The only AI-driven, cloud-native business communications
Render
Cloud and hosting
Deploy and scale any app or agent from your first user to your
LiveKit
Developer tools
An open source framework and developer platform for building, testing, deploying, scaling, and observing agents in
Quickbase
No-code and automation
Quickbase is a cloud-based platform that allows businesses to create custom applications and workflows to streamline their processes and
Radar
Developer tools
Radar helps teams fight fraud, optimize operations, and engage customers, powered by the most accurate, real-time location and device
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.