No public evidenceAdvocately and GDPR
CertReports found no public GDPR evidence for Advocately as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 29 Jan 2019
- Scope
- All of our data storage systems are based in the United States; we have global customers. Advocately, Inc. (“We” or “Our”) receives and process on behalf of our customers through our online advocacy management platform (the “Services”). We process Customer Data submitted by customers for the purpose of providing the Services to customers. To fulfill these purposes, we may access data to provide the Services, to prevent or address service or technical problems, to respond to customer support matters, to follow the instructions of our customer who submitted the data, or in response to contractual requirements with our customers. As a Data Controller, we collect the following data as and when provided by our customers. First and Last names Email Company name Company Logo Last sign in at Product usage metrics As a Data Processor, we collect data as and when it is provided by our customers, this data is dynamic by account and is only collected due to explicit customer actions; i.e. uploading a CSV file, integrating a CRM, integrating a Survey software and importing Survey Responses. The third parties who receive our data as subprocessors are listed in full here (https://www.advocate.ly/subprocessors/); they are all located in the United States. salesforce.com, inc. is a Cloud Service Provider; in this context, we utilize their Heroku platform for serving our website. Elasticsearch BV is a Cloud Service Provider; in this context, we utilize their Elastic Cloud product as a Database. Segment.io, Inc. as a Cloud-based hub for Customer data; we use Segment as an intermediary to send data to other subprocessors (Freshworks, Inc and Intercom, Inc). Freshworks, Inc. as a Cloud-based CRM Service; We use the Freshsales product for managing customer accounts and retaining a log of communications with our customers. Intercom, Inc. as a Cloud-based CRM Service; Intercom is used to provide in-app communication to our customers as well as send emails with tips about our products/services. This platform also contains some information about how our customers have used our products/services. Mailgun Technologies, Inc. as a Cloud-based Email Notification Service; We utilize Mailgun as an email provider; we send our customers transactional emails regarding their Advocately accounts and it is also the platform that our customers use to communicate with their customers through our platform.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Advocately, Inc: Inactive | Live pagesha256 38f7963b22 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Advocately GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.