Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
15Five
GDPR evidence
15Five is the performance management platform that creates effective managers, highly engaged employees, and top-performing
Vendor-stated15Five and GDPR
15Five states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%| Source | Captured | Quote | Links |
|---|---|---|---|
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 1 Nov 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 31 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 29 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 27 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 25 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 23 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 21 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 19 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 17 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 15 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 13 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 11 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 9 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 7 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 5 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 3 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 1 Oct 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 29 Sep 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 27 Sep 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 25 Sep 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 21 Sep 2026 | GDPR | |
15Five trust centre (Drata) Vendor trust centre · HTTP 200 | 18 Sep 2026 | GDPR |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 6 Mar 2018
- Scope
- Information is collected in support of the customer's organizational success. Data collected is personal feedback for review by the customer's management hierarchy to facilitate communication and improved workplace culture. The encrypted information provided is accessible only within the customer's organization. When a customer registers for 15Five we ask for information such as their name, company name, email address, billing address, credit card information. Members who sign up for a free trial are not required to enter a credit card. 15Five uses collected information for the following general purposes: products and services provision, billing, identification and authentication, services improvement, contact, and research. 15Five may disclose aggregated, anonymous, or anonymized data to third parties for market research, trend research, academic research, benchmarking, forecasting, or any other purpose. In all such instances, we will not disclose any identifiable information about the customer, their respondents, or their company. 15Five may also analyze customer usage patterns and the usage patterns and respondents to improve or optimize our services. Consistent with this Privacy Policy, 15Five may also disclose personally identifiable information under special circumstances, such as to comply with subpoenas or when customer actions violate the Terms of Service.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | 15Five: Inactive | Live pagesha256 62af4c4757 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is 15Five GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the HR and HRIS category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Culture Amp
HR and HRIS
Empower your teams and fuel positive change with performance, development, and employee engagement tools – all-in-one intuitive employee
Lattice
HR and HRIS
Modern people management platform.
Quantum Workplace
Collaboration
Build thriving teams with Quantum Workplace's HR
MentorcliQ
HR and HRIS
Explore #1 mentoring and ERG platform driving retention, development, and engagement at global
inFeedo AI
HR and HRIS
AI to engage employees, predict attrition and automate HR/IT support
Humaans
HR and HRIS
AI-Powered HRIS for high performing teams
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read