Explainers
Data Processing Agreement: What GDPR Requires and When You Need One
Solomon Amos · 29 Oct 2026 · 9 min read
legal
GDPR evidence across 471 vendors
GDPR has no certification in general use. What a buyer can verify is a data processing agreement, standard contractual clauses, an EU representative, data residency options, and an active Data Privacy Framework listing. CertReports records each of those as its own dated fact.
- Verified rows
- 0
- Vendor-stated
- 471
- Expired
- 0
- Last verified
- 2 Nov 2026
Wrike
Project management
Wrike is a work management platform that delivers real-time project and task insight to its
Everlaw
Legal tech
Transform your approach to litigation and
Panopto
Education
At Panopto, we believe that video can have a transformative effect on
Sauce Labs
Developer tools
What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it
CrowdStrike
Security
CrowdStrike Falcon is the only solution to unify next-gen AV, endpoint protection and response, managed hunting, IT hygiene and threat
Datadog
DevOps and observability
Datadog is a monitoring service for hybrid cloud applications, assisting organizations in improving agility, increasing efficiency, and
Okta
Identity and access
Okta is an Identity-as-a-Service (IDaaS) platform that provides a comprehensive suite of services focused on managing and securing user
Drata
Compliance and GRC
Drata’s AI-native compliance automation & agentic trust management platform powers GRC and assurance (GRC +A) for startups, mid-size
Cyera
Security
The Cyera Data Security system allows organizations to discover data categories and ensure that they are protected according to
GitLab
Developer tools
A complete DevOps platform delivered as a single application.
Axon
Government and public sector
Axon Enterprise, formerly known as TASER International, creates connected technologies for truth in public
Mimecast
Security
Mimecast provides email management as a single service in the cloud that helps customers slash on-premise email storage requirements
SentinelOne
Security
SentinelOne is redefining cybersecurity by pushing the boundaries of autonomous
Ironclad
Legal tech
AI-powered contract management
Pendo
Analytics
Pendo feeds product context to the apps and AI agents you build or buy, so you can understand your users, act where it counts, and drive
UKG
HR and HRIS
HR, Payroll, & Workforce Management
Netskope
Security
Netskope™, the leading cloud access security broker (CASB), helps enterprises find, understand and secure sanctioned and unsanctioned cloud
Acquia
Business services
Acquia, Inc. (Acquia) is a privately held, open-source digital experience company that supports customers using the free and open-source content managemen...
CircleCI
Developer tools
CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy
Medallia
Education
Medallia is an American customer and employee experience management company based in Tysons, Virginia
Sprinklr
Customer support
Sprinklr is a provider of enterprise software solutions that help organizations unify customer-facing functions across digital
WalkMe
Productivity
WalkMe provides a platform for on-boarding and simplifying of user experience in web based
HireVue
Recruiting
At HireVue, we exist to connect talent to opportunity and unlock the potential in every candidate—because everyone has
Revinate
Travel and hospitality
We power 950 million+ guest profiles and $17.2 billion in direct revenue for over 12,500 hotels
Data Privacy Framework
The EU-US DPF list is an official registry with annual recertification and a usage end date per participant. The General Court dismissed the challenge to the adequacy decision on 3 September 2025 (T-553/23); an appeal is pending at the Court of Justice (C-703/25 P).
DPA and subprocessors
"[vendor] dpa" and "[vendor] subprocessors" are among the most searched vendor questions. CertReports links the DPA and captures the subprocessor list with logos and change history where it is public.