Alpaca
GDPR evidence
API-first stock and crypto brokerage platform
No public evidenceAlpaca and GDPR
CertReports found no public GDPR evidence for Alpaca as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 14 Nov 2025
- Expires or valid through
- 14 Nov 2026
- Scope
- Alpaca collects personal data in the course of its business activities, including in connection with the opening of brokerage accounts, digital asset accounts, and some client services. We also collect personal data on certain areas of the Sites when users register for or apply for jobs through the Alpaca Recruitment Portal, create a user profile, register for Alpaca newsletters and alerts, and/or participate in public user posting areas (such as bulletin boards, discussion forums, and surveys). The personal data we collect and may be provided by you includes: name telephone number e-mail address address tax or government ID investment profile information background information (education, work experience) required to apply for a job. We limit our data collection to information that is necessary for the specific purposes outlined in this policy and do not collect personal data beyond what is reasonably required for those purposes. We may also automatically collect information about the devices you use to interact with our Sites. The information we automatically collect may include IP address, device identifier, web browser, and browsing information collected through cookies, web beacons, pixels, clear gifs, and other similar technologies (collectively “Cookies and Other Tracking Technologies”) on our Sites. We may also automatically collect information about how you use the Sites, such as what you have searched for and viewed on the Sites. The information automatically collected may be associated with a unique identifier as well as with any other personal data you have provided. Alpaca may also collect personal data about you from third parties, such as data brokers or aggregators, in the course of its business activities including in connection with some client services. This includes demographic, professional, and other information that is publicly available online, including information you choose to make public through social media platforms and other public online forums. We may combine this data with existing information we have about you or use it independently, for our benchmarking and market data analytics activities (e.g., analysis of recruiting practices across an industry, detecting fraud patterns in connection with financial transactions, or otherwise). We will always seek to confirm that the third party has provided transparent information about its use of this data, including its disclosure to third parties like Alpaca, in compliance with applicable law.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Alpaca: Active: EU-US Certification | Live pagesha256 054ffd8db0 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Alpaca GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Developer tools vendor has GDPR evidence in the index yet.