Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Annex Cloud
GDPR evidence
Find the right loyalty platform for your
No public evidenceAnnex Cloud and GDPR
CertReports found no public GDPR evidence for Annex Cloud as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 26 Feb 2019
- Expires or valid through
- 7 Apr 2027
- Scope
- Social Annex, Inc. dba Annex Cloud uses the collected data for various purposes: To provide and maintain our Service To notify you about changes to our Service To allow you to participate in interactive features of our Service when you choose to do so To provide customer support To gather analysis or valuable information so that we can improve our Service To monitor the usage of our Service To detect, prevent and address technical issues To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or inquired about unless you have opted not to receive such information While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“”Personal Data””). Personally identifiable information may include, but is not limited to: • Email address • First name and last name • Phone number • Cookies and Usage Data We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send. Our Customers in their use of our Service may provide us with de-identified, anonymized unique identifiers of data that contain no Personal Data, or data sets with limited Personal Data. In either case, our Customers remain the Controller of such Data, and we act as Data Processors. If you provide us information through our Microsites Service, we will collect and process Personal Data according to our Customers requirements which may include additional Personal Data not listed above. We will utilize such Personal Data strictly to provide our Customers with the Service Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. Social Annex, Inc. dba Annex Cloud uses online behavioral advertising services (“OBA”) to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Service. You can opt out of OBA by adjusting your cookie settings, browser settings, or following the instructions below in accordance with specific advertising networks. We participate in the Google and Facebook ad network.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Annex Cloud: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 c332bedb5f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Annex Cloud GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Extole
Marketing
Boost revenue with our enterprise
Appcues
Marketing
Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying
Attentive Mobile
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read