Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
8x8
GDPR evidence
8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere
Vendor-stated8x8 and GDPR
8x8 states it holds a data processing agreement. CertReports captured this on 30 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 30 Sep 2026 · confidence 90%VerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 14 Nov 2016
- Expires or valid through
- 28 Jan 2027
- Scope
- 8x8 provides cloud communications services, including Unified Communications as a Service (UCaaS), Contact Center as a Service (CCaaS), and Communications Platform as a Service (CPaaS), to business customers. In providing these services, 8x8 processes the communications our customers transmit, receive, or store through our services. The personal data processed includes metadata related to the communications, the content of the communications, and business card information for customers' users. Our customers decide what, if any, personal data to include in the content of such communications. The personal data concerns our customers' users of 8x8 services and others that the users communicate with using 8x8's services. 8x8 uses a number of sub-processors to provide its services, which are listed at https://support.8x8.com/support-services/billing-account-management/who-are-8x8s-sub-processors.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | 8x8, INC.: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 12c32c8291 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is 8x8 GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: 8x8 Group Companies8x8 Group Companies appeared on the subprocessor list.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Communications and CPaaS category) whose GDPR row is verified or vendor-stated, ranked by similarity.
RingCentral
Communications and CPaaS
Power the voice of your business with RingCentral Agentic Voice AI, including AI Receptionist (AIR), AI Virtual Assistant (AVA), & AI
Dialpad
Communications and CPaaS
The only AI-driven, cloud-native business communications
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read