No public evidenceAutomattic and GDPR
CertReports found no public GDPR evidence for Automattic as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 12 May 2017
- Expires or valid through
- 6 Jan 2027
- Scope
- Automattic and WPVIP provide enterprise customers (“Clients”) with website hosting, support and professional services and a content analytics service known as Parse.ly. We process personal data for some Clients when providing those services. Clients using our website hosting services may provide personal data in the form of information about visitors to the Client’s public-facing websites or intranet sites hosted on the WordPress VIP service (“Client Sites”). Such data may include information relating to end-user accounts (if any) on a Client Site (such as username and email address) and any content containing personal information on a Client Site. Parse.ly is an analytics service that Clients use on their websites and applications to track user engagement with the content on those sites and applications. In the course of providing the Parse.ly service, we process personal data regarding such users including, but not limited to, names, addresses, email addresses, ip addresses, unique user IDs and browsing history. We treat each Client as a data controller for the data described above and we process such data on behalf of our Clients as a data processor. We disclose such data only to our third-party service providers who help provide the WordPress VIP services to Clients and where disclosure is legally compelled.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Automattic Inc.: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 a1535febb6 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Automattic GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Cloud and hosting category) whose GDPR row is verified or vendor-stated, ranked by similarity.
