Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
RADAR
Compliance and GRC
Manage privacy and AI incidents with speed and consistency using RadarFirst’s proven platform, AI-assisted capabilities, and regulatory
Netlify
Developer tools
Create with AI or code, deploy instantly on production
Pipedrive
CRM
Pipedrive is the easy-to-use, #1 user-rated CRM
Front
Customer support
Customer communications hub for building strong relationships
FullStory
Analytics
Fullstory helps companies understand and improve how humans and AI agents interact with digital
Five9
Communications and CPaaS
Five9 delivers reliable cloud contact centre and AI services that empower organisations to deliver extraordinary customer
Personio
HR and HRIS
Shortcut
Developer tools
Shortcut is a fast, lightweight and enjoyable project management platform where software teams and their AI agents plan, build, and ship
Apollo.io
Sales tools
Apollo is the foundation of your entire go-to-market strategy.
Cohere
AI infrastructure
Support automation that's actually intelligent
Harvey
Legal tech
Legal AI tailored for leading law firms and corporate legal teams
Laravel
Developer tools
Laravel is a framework for building modern web apps and AI
Perplexity
AI assistants
Perplexity AI, Inc., or simply Perplexity, is an American privately held software company offering a web search engine that processes user
PlanetScale
Data platforms
PlanetScale offers the worldâs fastest and most scalable cloud hosting for Vitess, Neki, and
Bitly
Marketing
Bitly makes it easy to create, share, and track short links and QR
Caspio
Compliance and GRC
Caspio is an AI platform for building custom business applications, with annually certified HIPAA, SOC 2 Type II, and GDPR compliance and
Crossbeam
Sales tools
Crossbeam is the global standard for Ecosystem-Led
PDQ
IT management
PDQ has simple, secure, and pretty damn quick IT device management solutions for effortless software deployment and
PubNub
Cloud and hosting
Power your real-time app with PubNub—the world's largest pub/sub
Appcues
Marketing
Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying
Celigo
No-code and automation
Build, run, and govern automation on one
Daily
AI infrastructure
Conversational Voice and Multimodal AI built with Open Source
float
Project management
The #1 rated resource management
Hightouch
Marketing
The leading Composable CDP and AI Decisioning platform
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Guides on GDPR
All articlesExplainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read