Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
ActivTrak
GDPR evidence
ActivTrak’s work intelligence helps leaders understand how work gets done across people, tools and
Vendor-statedActivTrak and GDPR
ActivTrak states it holds a data processing agreement. CertReports captured this on 30 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states GDPR on its trust centre
as of 30 Sep 2026 · confidence 90%ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 14 Jul 2020
- Scope
- We collect Personal Information that customers provide to us through our Sites, and in connection with other business dealings we may have with customers. Such information may include: First and last name Company name Title Email address IP address Login user name and password Mailing address Telephone number Fax number Personal preferences regarding products and services Location Information necessary to process a credit card transaction, such as the credit card type, number, and expiration date. This data is used for business use: We use your Personal Information primarily to facilitate our ongoing and proposed business dealings with customer(“Business Use”). This includes to: (1) process business transactions with us that customers initiate, including without limitation orders of products and services and the creation of user profiles; (2) establish and maintain customer accounts so that we may provide products or services of ours requested by customer; (3) register customer as a user of these products or services so that the customer may access them through our Sites or otherwise; (4) communicate with customers about updates, maintenance, outages, or other technical matters concerning these products or services; (5) provide customers with training and support regarding usage of these products or services; (6) notify customers about changes to any of the policies and procedures for use of these products or services; (7) verify the accuracy of account and technical contact information we have on file for customers and your customers company in relation to these products or services; (8) respond to questions or inquiries that customers may have about our products or services. We also may use customer Personal Information as required for us to comply with laws and regulations relating to the products or services that we provide in any of the jurisdictions in which we or our affiliated companies operate, including the United States; and (9) we may use Usage Information internally within ActivTrak to help us improve our products or services, or to develop new products or services. Marketing Purposes With customer consent or as otherwise permitted by applicable law, we may use customer Personal Information for purposes relating to the marketing of our content, products, and services, or those of our business partners
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is ActivTrak GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Google Cloud PlatformGoogle Cloud Platform appeared on the subprocessor list.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Research and data providers category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Meltwater News
Research and data providers
Turn media monitoring, social listening and AI signals into actionable intelligence with
CodeSignal
Research and data providers
Discover the agentic skills intelligence platform that helps teams see, measure, develop, and grow skills clearly with
Crucial Data Solutions
Research and data providers
TrialKit is a unified eClinical platform with embedded intelligence that helps sponsors and CROs design, build, manage, and analyze
DomainTools
Research and data providers
DomainTools provides DNS-based threat intelligence covering 97% of internet
Icertis
Research and data providers
The Icertis platform delivers an enterprise–wide contract intelligence layer that understands business and industry context – connecting
Introhive
Research and data providers
Introhive is a Relationship Intelligence Platform that empowers firms to automate CRM data entry, enrich and maintain CRM data quality, and
VisibleThread
Research and data providers
Full-lifecycle RFP intelligence, traceable AI insights, and security without
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read