Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Agari Data
GDPR evidence
American company from Foster City, California
agari.comLast verified 2 Nov 2026
No public evidenceAgari Data and GDPR
CertReports found no public GDPR evidence for Agari Data as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 20 Jul 2017
- Scope
- NON-HR PERSONAL DATA: Agari’s primary service consists of a SaaS-based email security solution which is run in the cloud. Personal data collected, received, accessed, used and disclosed (both online and offline) in connection with business activities of Agari Data, Inc. and its subsidiaries (collectively "Agari") includes information related to Agari’s prospective, current, and former: customers, suppliers, vendors, partners, and resellers. In connection with its service, Agari’s customers may elect to have information related to their email communications sent to Agari’s service in order for Agari to provide the service and enhance the efficacy of its solution. Such information may include meta-data, including, without limitation, information contained in the “From,” “To,” “Subject” and other SMTP headers which, in turn, may include personally-identifiable information. Such information is stored in Agari’s databases and allows Agari to provide its email authentication and email security services by enhancing its ability to determine on its customers’ behalf whether emails are legitimate or malicious. Agari uses personal data received from the EU online, offline, and/or in connection with products and services primarily for: (1) enabling and providing its website(s), products, or services (as for any other purposes as may be further set forth in agreements between Agari and its customers, including acting as a data processor on behalf of its customers which act as data controllers); (2) customer service activities, including processing orders, providing technical support, and customizing, enhancing, upgrading and improving Agari websites and offerings; (3) sales and marketing activities and customer relationship management (including newsletters and notices); and (4) internal business processes and management, crime/fraud detection and prevention, security, protecting Agari’s legal rights, and compliance with governmental, legislative, and regulatory requirements. Agari may disclose personal data to business partners and subcontractors, as necessary, for the purpose of providing Agari’s service and performing other requested services, or as otherwise appropriate in connection with a legitimate business need. Such companies are authorized to use personal data only as necessary to provide such services to Agari. HR PERSONAL DATA: Agari human resources data includes personal information of current and former Agari employees, Agari contingent workers (including temporary workers and other non-employee personnel), and individuals who apply to work at Agari. Such data may initially be collected by Agari’s UK subsidiary, Agari Data UK Ltd. Human resources data is processed by Agari primarily for the purposes of: (a) identifying, selecting, maintaining, managing, and administering its workforce; (b) running its operations; (c) ensuring the safety, security, and protection of its employees, other workers and visitors, and Agari resources and assets; and (d) internal business processes and management, crime/fraud detection and prevention, security, auditing, data analysis and data storage, protecting Agari’s legal rights, and compliance with governmental, legislative, and regulatory requirements. With respect to both HR and Non-HR matters, Agari may also disclose personal data to a third party, as necessary, in connection with the sale or transfer of all or part of Agari’s business.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Agari Data, Inc.: Inactive | Live pagesha256 2aca9e421f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Agari Data GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
Mimecast
Security
Mimecast provides email management as a single service in the cloud that helps customers slash on-premise email storage requirements
Abnormal AI
AI tools
Abnormal AI is the leading AI-native human behavior security platform, leveraging machine learning to stop sophisticated inbound attacks
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read