Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Stream.io
Networking
Scalable and fast APIs for building social networks and
Zowie
Customer support
The AI agent platform leading enterprises trust to run in
Guesty
Real estate and property
The management platform for the short term rental industry.
Hyperbound
Sales tools
Revenue Activation Platform
Hyros
Analytics
Hyros is the only Ad Tracking Software trusted by thousands of businesses to get accurate ad performance
iClassPro
Scheduling
Streamline your success with industry-leading Class Management
Inbenta
Customer support
Inbenta is an AI company that originated in Barcelona, Spain, in 2005
Inbox Monster
Analytics
Boost email & SMS performance with Inbox Monster's creative rendering, deliverability and analytics tools for marketers who want
InRule Technology
No-code and automation
InRule brings together business rules, process automation, and AI to design, test, and deploy governed decisions that meet regulations
Interact Intranet
Collaboration
Deliver a better employee
Invoca
Sales tools
Convert more inbound leads with AI that engages, qualifies, and routes high-intent buyers across online and offline
Kaleris
Procurement
Our supply chain logistics platform connects shippers worldwide to an ecosystem that offers real-time insights on what's going on in the
Katalon
No-code and automation
Katalon True Platform unifies test management, automation, execution and production
KLDiscovery Ontrack
Legal tech
KLDiscovery delivers AI-driven eDiscovery software and services supporting litigation, investigations, and regulatory matters for legal
Kognitiv
Business services
We are a dedicated Workday services partner consultancy who offers a flexible, pay-as-you-use consulting model that perfectly complements
Koncert
Sales tools
Boost your B2B sales with
Laurel AI
Finance and accounting
Laurel is the AI timekeeping platform for law, accounting & consulting firms—auto-capturing billable work and turning time into
LifeLenz
HR and HRIS
Workforce Management Platform built for you, loved by frontline
Linkby
linkby.com
Loyalty Juggernaut
Research and data providers
Agentic AI, real-time experiences, ecosystem-scale
Luminance
Legal tech
End-to-End AI for Every Contract
magicplan
Real estate and property
Restoration workflow software that connects field to office
Magic School
Education
Transform teaching and learning with an AI platform built for school
MedaSystems
Healthcare
A cloud platform empowering global expanded and managed access
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.
Guides on GDPR
All articlesExplainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read