Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Icertis
Research and data providers
The Icertis platform delivers an enterprise–wide contract intelligence layer that understands business and industry context – connecting
RFA
Business services
RFA is the first AI-native technology partner for finance: managed IT, cybersecurity, cloud, AI, and compliance for financial institutions
Adaptive Security
Education
Human security for the AI
Aptean
Manufacturing and industrial
Run your business with software built for your
Courier
Developer tools
The fastest way for developers to build notifications for their app.
CyberFOX
Identity and access
CyberFOX provides MSPs and IT Pros with identity access management (IAM) solutions in password management and privileged access
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
DroneDeploy
Real estate and property
See every inch of your site with
FastSpring
Payments
Sell globally and stay compliant with our merchant-of-record
Fathom.video
CRM
Fathom captures, transcribes, and summarizes Zoom, Google Meet, and Microsoft Teams
Zipline
getzipline.com
With retail operations software from Zipline, you fulfill all your goals by unifying your entire
Karat
Research and data providers
The trusted standard for technical interview and screening
Kustomer
Customer support
Deliver faster, personalized support with Kustomer's AI customer service
Litera
Legal tech
More than 1 million daily users legal professionals and 99% of the Am Law 100 amplify their impact with Litera’s legal technology
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Mouseflow
Analytics
Improve UX and conversions with website behavior analytics! Use session replay, heatmaps, and feedback to improve website user
Saturn
AI tools
Compliance and back office workflows for Wealth Managers.
Tidio
Customer support
See what your customer conversations
Upstash
Data platforms
Serverless Redis, Vector and Search databases with low latency and pay-as-you-go
vFairs
Video conferencing
Run registration, ticketing, mobile apps, check-in & virtual events on one
Vyond
Design tools
GoAnimate, Inc., doing business as Vyond since 2018, is an American privately held software company based in San Mateo, California
24 7 Software
Real estate and property
Manage security, facilities, guest experience, and event operations from a single platform trusted by leading stadiums, arenas, convention
Airwallex
Payments
Grow your business faster with Airwallex - global business accounts, high speed transfers, multi-currency cards, online payments, embedded
AiSDR
AI tools
AI that finds the right buyers and books sales meetings
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Guides on GDPR
All articlesExplainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read