Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
Legal tech
Legal AI tailored for leading law firms and corporate legal teams
Developer tools
Laravel is a framework for building modern web apps and AI
Marketing
Bitly makes it easy to create, share, and track short links and QR
Sales tools
Crossbeam is the global standard for Ecosystem-Led
Cloud and hosting
Power your real-time app with PubNub—the world's largest pub/sub
No-code and automation
Build, run, and govern automation on one
Research and data providers
The Icertis platform delivers an enterprise–wide contract intelligence layer that understands business and industry context – connecting
Developer tools
The fastest way for developers to build notifications for their app.
Identity and access
CyberFOX provides MSPs and IT Pros with identity access management (IAM) solutions in password management and privileged access
Payments
Sell globally and stay compliant with our merchant-of-record
Research and data providers
The trusted standard for technical interview and screening
Legal tech
More than 1 million daily users legal professionals and 99% of the Am Law 100 amplify their impact with Litera’s legal technology
Customer support
See what your customer conversations
Video conferencing
Run registration, ticketing, mobile apps, check-in & virtual events on one
Design tools
GoAnimate, Inc., doing business as Vyond since 2018, is an American privately held software company based in San Mateo, California
Payments
Grow your business faster with Airwallex - global business accounts, high speed transfers, multi-currency cards, online payments, embedded
Finance and accounting
Streamline private capital operations with Allvue’s AI-powered alternative investment software that automates accounting, investor
appfire.com
IT management
Asato is an asset optimization platform designed to help CIOs manage and optimize all their IT
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Marketing
Power better email creation with Beefree, the technology behind RGE Studio for marketing teams and Beefree SDK for developers building
Marketing
Turn your untapped retail data into one-to-one campaigns that make an immediate impact on revenue with
Education
Eliminate data chaos with the leading student information system for private & independent K-12
AI assistants
Perplexity AI, Inc., or simply Perplexity, is an American privately held software company offering a web search engine that processes user
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Solomon Amos · 29 Oct 2026 · 9 min read