No public evidenceAgilysys and GDPR
CertReports found no public GDPR evidence for Agilysys as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 13 Sep 2019
- Scope
- Agilysys has been a leader in hospitality software for more than 40 years, delivering innovative state-of-the-art cloud-native SaaS and on-premise solutions for hotels, resorts and cruise lines, casinos, corporate foodservice management, restaurants, universities, stadiums, and healthcare. Agilysys’s software solutions include point-of-sale (POS), property management (PMS), inventory and procurement, payments, and related applications. The information collected and processed through these applications helps Agilysys’s customers manage and enhance the entire guest journey for their customers. These activities make Agilysys a processor of personal data for its customers, who are data controllers. In this capacity, Agilysys neither owns nor determines the purposes for which it processes the personal data; rather, Agilysys’s customers do. Agilysys receives and processes personal data at the instruction of its customers, and in these circumstances, Agilysys has no direct relationship with the individuals to whom such personal data relates. Agilysys is required to process personal data in accordance with the Data Privacy Framework Principles and the contract terms between it and its customers. However, Agilysys depends on its customers, the data controllers, to comply with applicable data protection laws at the time personal data is collected or received. As a processor, Agilysys processes personal data concerning its customer’s employees, guests, and vendors. These parties are located around the world, including in the European Union, Switzerland, and United Kingdom. Sometimes in the course of serving as a processor, Agilysys discloses processes personal data to third parties. A list of such third parties can be found at https://www.agilysys.com/en/third-party-processing/. Personal data processed for these purposes specifically includes: •guest name, address, telephone, check-in/out dates, room number, email, company, loyalty programs/ids, preferences, identification/passport numbers, anniversary, and birthdate for room management, food and beverage orders, transaction processing, communications, leisure, table management, document management, and guest profile analysis; and •vendor employee names, work addresses, work email, job titles, phone and fax numbers may be captured in order to facilitate procurement Separately, Agilysys also serves as a controller of personal data concerning its job applicants and employees, who are located around the world. As a controller, Agilysys collects and processes personal data in order to support the application and/or employment relationship such as onboarding, benefits, performance management, etc. This data may be transferred from Agilysys’s global affiliates and subsidiaries to Agilysys, Inc. or Agilysys NV LLC in the US. Personal data processed for these purposes includes, but is not limited to: name, contact information, identification numbers, banking information, gender and ethnic information, marital status, health information, criminal history, and employment history. Finally, Agilysys is also a controller for data concerning visitors to its website. Such data is collected and processed in order to provide its customers, employees, investors, and others, with a personalized and high-quality internet experience. Agilysys’s collection and use of personal data varies based on the website services requested by the users and the users' choice of privacy options within the relevant website services
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Agilysys: Inactive | Live pagesha256 11cba6ea39 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Agilysys GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Travel and hospitality category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Travel and hospitality vendor has GDPR evidence in the index yet.