Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Adaptive Security
Education
Human security for the AI
Aptean
Manufacturing and industrial
Run your business with software built for your
DroneDeploy
Real estate and property
See every inch of your site with
Fathom.video
CRM
Fathom captures, transcribes, and summarizes Zoom, Google Meet, and Microsoft Teams
Zipline
getzipline.com
With retail operations software from Zipline, you fulfill all your goals by unifying your entire
Kustomer
Customer support
Deliver faster, personalized support with Kustomer's AI customer service
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Mouseflow
Analytics
Improve UX and conversions with website behavior analytics! Use session replay, heatmaps, and feedback to improve website user
Saturn
AI tools
Compliance and back office workflows for Wealth Managers.
Upstash
Data platforms
Serverless Redis, Vector and Search databases with low latency and pay-as-you-go
AiSDR
AI tools
AI that finds the right buyers and books sales meetings
Avala AI
DevOps and observability
Fleet Learning Infrastructure for Physical
bvnk
Payments
Enterprise stablecoin payments
CB Insights
Research and data providers
Private company data and research on 12M+
Cerebrum
DevOps and observability
Cerebrum delivers biometric identity verification and screening infrastructure to stop fraud, protect organizations, and streamline trust
ChurnZero
Customer support
Deliver digital first customer success with ChurnZero software that helps businesses improve the customer experience and drive
Cornerstone Information Systems
No-code and automation
Welcome to Cornerstone Information Systems, where we enable world-class travel management operations and travel
Civitas Learning
Education
AI built on your data and designed for higher education, helping all teams drive institutional outcomes and better support every
CleanDNS
cleandns.com
Coalesce
Data platforms
Coalesce is the data operating layer where humans and AI agents build, govern, and observe data together, in one governed
Sagemath
Developer tools
CoCalc is a persistent shared computer for technical work, where people and AI agents collaborate in the same Linux project with files
Conversica
Sales tools
Conversica’s AI Agents help you start effortless conversations with your customers that build trust, deepen relationships, and drive
Draftwise
AI tools
Contract and negotiation AI built for lawyers
Echelon Technologies
Analytics
Purpose-built AI for decision makers and business operations
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.