Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Allvue Systems
Finance and accounting
Streamline private capital operations with Allvue’s AI-powered alternative investment software that automates accounting, investor
Appfire Technologies
appfire.com
Asato
IT management
Asato is an asset optimization platform designed to help CIOs manage and optimize all their IT
Attentive Mobile
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Avala AI
DevOps and observability
Fleet Learning Infrastructure for Physical
Beefree
Marketing
Power better email creation with Beefree, the technology behind RGE Studio for marketing teams and Beefree SDK for developers building
Bluecore
Marketing
Turn your untapped retail data into one-to-one campaigns that make an immediate impact on revenue with
bvnk
Payments
Enterprise stablecoin payments
CB Insights
Research and data providers
Private company data and research on 12M+
Cerebrum
DevOps and observability
Cerebrum delivers biometric identity verification and screening infrastructure to stop fraud, protect organizations, and streamline trust
ChurnZero
Customer support
Deliver digital first customer success with ChurnZero software that helps businesses improve the customer experience and drive
Cornerstone Information Systems
No-code and automation
Welcome to Cornerstone Information Systems, where we enable world-class travel management operations and travel
Civitas Learning
Education
AI built on your data and designed for higher education, helping all teams drive institutional outcomes and better support every
CleanDNS
cleandns.com
Coalesce
Data platforms
Coalesce is the data operating layer where humans and AI agents build, govern, and observe data together, in one governed
Sagemath
Developer tools
CoCalc is a persistent shared computer for technical work, where people and AI agents collaborate in the same Linux project with files
Conversica
Sales tools
Conversica’s AI Agents help you start effortless conversations with your customers that build trust, deepen relationships, and drive
Draftwise
AI tools
Contract and negotiation AI built for lawyers
Echelon Technologies
Analytics
Purpose-built AI for decision makers and business operations
Edpuzzle
Education
Easily create beautiful interactive video lessons for your students you can integrate right into your
Entersekt International
Customer support
Enhance your digital banking with adaptive authentication and real-time risk intelligence that reduces fraud, improves customer experience
Extole
Marketing
Boost revenue with our enterprise
FacilityOS
Compliance and GRC
FacilityOS is the leading visitor & facility management platform, trusted by global enterprises to optimize key facility processes for
FirstIgnite
AI tools
AI-Powered Business Development for Scientific Organizations
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Guides on GDPR
All articlesExplainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read