AT
No public evidenceAtlan and GDPR
CertReports found no public GDPR evidence for Atlan as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, UK Extension Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 30 Jun 2017
- Expires or valid through
- 19 Aug 2027
- Scope
- Monitoring fidelity to the evidence-based model we train agencies to use in regards to helping families that are in the child welfare or juvenile delinquency system. We collect the user’s names and email address and the agency name, address, phone number and email address. We also collect basic demographic information about individuals receiving FFT (including year of birth, gender, race/ethnicity, state and country). We collect assessments from the clients and families to monitor outcomes and progress notes from each session for purposes of fidelity and adherence monitoring. Please refer to our privacy policy for details on the third parties to which we may disclose personal information.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | FFT LLC: Active: EU-US Certification, UK Extension Certification | Live pagesha256 675f8598ea |
VerifiedActive: EU-US Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 20 Jun 2024
- Expires or valid through
- 9 Jun 2027
- Scope
- At Atlan, we process personal data under the EU-U.S. Data Privacy Framework and other applicable frameworks to support our provision of B2B SaaS services. This processing is aimed at enhancing our services, ensuring operational efficiency, and complying with legal obligations. Types of Personal Data Processed: - Identity Data: Includes first and last names of individuals. - Contact Data: Covers email addresses and telephone numbers, which could be either work or personal, as disclosed by the individual. - Technical Data: Comprises internet protocol (IP) addresses and details of third-party websites from which individuals access our website. - Employment Data: Involves job titles which help in human resources management. Purpose of Data Processing: - Service Provision: Personal data is processed to provide and improve our services, which include verifying user information, managing our services effectively, and facilitating communications with users. - Internal Administration: This includes operations management, financial management, human resources, IT management, and marketing. - Legal Compliance and Security: We process data to comply with legal requirements, manage contracts, and secure our services against unauthorized or illegal activities. - Analysis and Market Research: Data is also used for analyzing user behavior, conducting statistical analyses, and performing market research to inform business strategies. Third Parties to Which Data is Disclosed: - Data may be shared with government and regulatory authorities, law enforcement, legal proceedings or claims participants, and other relevant third parties as required by law. Additionally, data is shared with our group companies, affiliates, and carefully selected vendors to facilitate the operations mentioned above. Each of these activities is conducted with strict adherence to the principles of the Data Privacy Frameworks, ensuring that personal data is processed fairly, lawfully, and transparently, providing appropriate security measures to protect data, and respecting the privacy rights of individuals involved.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Atlan Inc.: Active: EU-US Certification | Live pagesha256 83329b1c2b |
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 28 Aug 2024
- Expires or valid through
- 5 Aug 2027
- Scope
- Categories of personal information •Name •Job title •Company address and work location •Email address •Phone number •Account settings including operating systems used, language, purchase history, and currency •Login credentials such as your username and password •Billing information We use this information for the following purposes: •To respond and you during the sales process • To automatically customize documents with your information • To enable us to provide services and support • To respond to your inquiries and provide a better product support experience • To email informational communications about products and services and promotional offers • To alert you of software upgrades, updates, or other services from OmniByte • To contact you about your account, order confirmations, and transactional information for the product(s) and/or service(s) you have purchased. We may share personal data with our services providers, who process personal data on our behalf, such as customer support and processing event registrations. We will only provide such companies with the information required for them to perform these services.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | OmniByte: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 87e2ef6da1 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Atlan GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Data platforms category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Data platforms vendor has GDPR evidence in the index yet.