How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
AVOXI
GDPR evidence
iubenda is your 360° compliance solution for global data privacy
No public evidenceAVOXI and GDPR
CertReports found no public GDPR evidence for AVOXI as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 30 Jan 2020
- Expires or valid through
- 5 Dec 2026
- Scope
- The High Sabbath Adventist Society collects and stores usage data and personal customer information such as name, contact information and in some cases, birth date. The data concerning the user is collected to allow us to provide our services, which include, but are not limited to subscription services, social features, and payment handling. When payments are made through Stripe or PayPal, as offered on our website, we do not collect or process that payment data, but if payments are made through other means, then we collect that information for payment processing, which may require disclosing it to a financial institution in accordance with the provisions of the Data Privacy Framework.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | High Sabbath Adventist Society, LLC: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 4ed0f9d3d3 |
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 25 Oct 2018
- Expires or valid through
- 31 Aug 2027
- Scope
- AVOXI collects and processes personal data to provide its services in accordance with the performance of contracts with Customers, to communicate with Customers about Customers' use of our Services and to fulfill Customer orders. (AVOXI primarily provides voice communications services to businesses in addition to virtual call center software.) Personal data is also collected and processed to allow AVOXI to respond to Customer inquiries, to provide any information Customer requests, to address trouble tickets, and for providing customer service. Additionally, AVOXI collects and processes personal data for marketing and promotional purposes, for billing, to better understand how Customers use our Services, to administer, monitor and improve AVOXI Services for internal purposes to include research and analytical purposes, and to investigate fraud, harassment and other types of unlawful activities involving the Services being provided. The type of personal data may include: email address, postal address, telephone numbers, end user and/or employee names, product or service interest, services required, job titles, marketing preferences, IP addresses, banking information, identification documentation if mandated for order fulfillment, call recordings when applicable, and call detail records. A detailed description of types of data collected and mode and place of processing is available in AVOXI’s Privacy Policy.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | AVOXI: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 5aaf15a536 |
VerifiedActive: SW-US Certification, UK Extension Certification, EU-US Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 12 Dec 2016
- Expires or valid through
- 2 Feb 2027
- Scope
- To provide personalized training in the form of adaptive learning; to provide personalized training experience; to provide recruitment and career feedback. We only process "business card" data - email address & name. This is to uniquely identify someone who uses our crisis simulation platform. We do not share any data with anyone.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Transmedia Storyteller Ltd: Active: SW-US Certification, UK Extension Certification, EU-US Certification | Live pagesha256 36b7d6b37b |
VerifiedActive: EU-US Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 2 Jul 2018
- Expires or valid through
- 12 Jan 2027
- Scope
- Data collected: Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Cookies; Usage Data; email address; first name; last name; country; ZIP/Postal code; username; website. Data usage: The Data concerning the User is collected to allow the Owner to deliver and manage the Application and related Services, including user accounts, content, and communications, comply with legal obligations, respond to enforcement or regulatory requests, and protect the rights and interests of Rainmaker Digital Services LLC, its Users, or third parties, detect any malicious or fraudulent activity, as well as the following: Google Analytics and Meta ads conversion tracking (Meta pixel),external social networks and platforms, such as Facebook, X (Twitter), and LinkedIn social widgets, payment handling on Authorize.net, Zoho Payments and PayPal, manage email communications, newsletters, and marketing messages via providers such as Sendgrid, and manage the user database and CRM functions via ZOHO CRM (Zoho Corporation Pvt. Ltd.)
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Rainmaker Digital: Active: EU-US Certification | Live pagesha256 1b1ba864d5 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 1 Aug 2017
- Scope
- Carbn processes visitor and customer personal information related to website and login access to Carbn's SaaS platform located on the web at www.carbn.io. Login information includes: first name, last name, login name, hashed password, location, address, phone number, and email. In addition to collected login information, Carbn utilizes third-parties for the following services: Analytics Google Analytics Personal Data: Cookies and Usage Data Displaying content from external platforms Google Fonts Personal Data: Usage Data and various types of Data as specified in the privacy policy of the service Handling payments Stripe Personal Data: various types of Data as specified in the privacy policy of the service Hosting and backend infrastructure Amazon Web Services Personal Data: various types of Data as specified in the privacy policy of the service Registration and authentication Google OAuth Personal Data: various types of Data as specified in the privacy policy of the service
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Carbn, Inc.: Inactive | Live pagesha256 8e3ac7af75 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 3 Mar 2019
- Scope
- My company collects personal and financial data from contractors / vendors. We also developed a live web game for a client, in which we have provided a means for our client to collect user data from players of their game that have opted-in to giveaways. The data we retain for each user is: date of birth, location / region, and email address. We are the processors of this data, but are not the data controllers. Our client chooses how to use this user data. Other than the client, we do not disclose this information to any third parties.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Christine Brownell Creative LLC: Inactive | Live pagesha256 3922636906 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 21 Jan 2020
- Scope
- Personal Data collected for the following purposes and using the following services: • o Access to third-party accounts Facebook account access Permissions: Share o Advertising Clickpoint, ClickWall, Reach and Facebook Lookalike Audience Personal Data: Cookies; Usage Data Facebook Audience Network Personal Data: Cookies; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data o Analytics Wordpress Stats, Google Analytics, Matomo, Clicky, Hotjar Form Analysis & Conversion Funnels, HubSpot Analytics and Facebook Ads conversion tracking (Facebook pixel) Personal Data: Cookies; Usage Data Facebook Analytics for Apps Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service o Commercial affiliation ClickBank Personal Data: Cookies; Usage Data o Content commenting Facebook Comments Personal Data: Cookies; Usage Data o Content performance and features testing (A/B testing) Google Optimize and Google Optimize 360 Personal Data: Cookies; Usage Data o Data transfer outside the EU Data transfer from the EU and/or Switzerland to the U.S based on Privacy Shield Personal Data: various types of Data o Displaying content from external platforms Google Fonts Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service Font Awesome Personal Data: Usage Data Google Maps widget and YouTube video widget Personal Data: Cookies; Usage Data o Heat mapping and session recording ClickTale and Crazy Egg Personal Data: Cookies; Usage Data Hotjar Heat Maps & Recordings Personal Data: Cookies; Usage Data; various types of Data as specified in the privacy policy of the service o Interaction with data collection platforms and other third parties Hotjar Recruit User Testers Personal Data: Cookies; Usage Data; various types of Data o Interaction with external social networks and platforms Facebook Like button and social widgets Personal Data: Cookies; Usage Data o Interaction with live chat platforms ClickDesk Widget and Facebook Messenger Customer Chat Personal Data: Cookies; Data communicated while using the service; Usage Data o Interaction with online survey platforms Hotjar Poll & Survey widgets Personal Data: Cookies; Usage Data; various types of Data o Managing data collection and online surveys Hotjar surveys Personal Data: company name Facebook lead ads Personal Data: address; city; company name; Cookies; country o Platform services and hosting WordPress.com Personal Data: various types of Data as specified in the privacy policy of the service o Registration and authentication WordPress.com Single Sign On and Facebook Authentication Personal Data: various types of Data as specified in the privacy policy of the service o Remarketing and behavioral targeting LinkedIn Website Retargeting and Facebook Remarketing Personal Data: Cookies; Usage Data Facebook Custom Audience Personal Data: Cookies; email address o Tag Management Google Tag Manager Personal Data: Usage Data o Traffic optimization and distribution Cloudflare Personal Data: Cookies; various types of Data as specified in the privacy policy of the service o User database management HubSpot CRM Personal Data: email address; phone number; various types of Data as specified in the privacy policy of the service Intercom Personal Data: Cookies; email address; Usage Data; various types of Data as specified in the privacy policy of the service
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | EOS Worldwide: Inactive | Live pagesha256 25484f86a8 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 18 Sep 2020
- Scope
- SureAdhere’s Video Directly Observed Therapy (VDOT) platform consists of a patient-facing mobile application (compatible with iOS and Android operating systems) used by patients to record their medication ingestion events, and a web-based Client Management System (CMS) used by health provider staff (i.e., clinicians, research staff, trial staff, etc.) to observe patient videos, document medication ingestion, monitor treatment adherence, and facilitate support for patients at risk for non-adherence. Once the free VDOT app is downloaded on the patient’s own or program-provided smartphone or tablet and the patient is registered in the CMS (a process that can take only minutes), treatment monitoring may begin. SureAdhere DOES NOT share ANY protected health information with third parties--our clients own their data and are able to have it transferred or deleted as requested.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | SureAdhere Mobile Technology, Inc.: Inactive | Live pagesha256 2e3a1e2001 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Scope
- We are a web hosting company and data will exist on our servers that is uploaded by our customers. Our customers remain the owner of the data they submit to our servers and the type of data that can be stored is therefore controlled by the customer. Our customers act as data controller for that data, and we act as data processor. We do not access the data our customers store on our services and any processing (as a Data Processor) is only regarding the hosting services we provide to them, and any assistance that they may require in utilising our hosting service. We do not use their data for any processing of our own. Data we store may be processed by other sub-processors in order to allow us to fulfil our contractual obligations to our customer (for example, other cloud service providers, backup providers or other SaaS solutions as required to fulfil an order).
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | KGIX LLC: Inactive | Live pagesha256 a40e4a2890 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 26 Jun 2024
- Scope
- We collect personal data such as name and email for user registration and communication purposes. This data is also used to provide customer support and improve our services. We share personal data with third-party service providers such as Intercom and Posthog, which are mentioned in our Terms of Service and Privacy Policy. These vendors assist us with customer support, user analytics, and service improvement.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | PromptHub: Inactive | Live pagesha256 8640fecf6b |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Scope
- Retool's data collection and data processing purposes vary based on the products and services Retool offers to its Users and Customers. In general, the purposes include, e.g., providing Retool products and services, such as: connecting to datasources, allowing Customers to build tools around them, conducting data analysis to improve Retool product and services.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Retool: Inactive | Live pagesha256 10c9cc95e2 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Scope
- We provide web development services and web hosting services and therefore collect personal data related to our clients (used for contact and billing purposes) and our customers' website visitors (used for tracking the number of visitors, website security, and as directed by our customers). Data collected will be used on our 3rd party server hosting providers and backup providers.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Camna, LLC: Inactive | Live pagesha256 6ec18e590b |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 13 Sep 2016
- Scope
- Ionic.com collects personal data for the purpose of advertising, user database management and analytics. Ionic Security Inc. receives personal information from the EU/EEA as a result of the operations related to Ionic.com web site (ionic.com) and providing associated services. In general, the personal information we collect enables us to provide services to customers and users and helps us to personalize and improve the experience at our web sites. We use customer provided information for different purposes depending upon the services being provided. Among other things, these purposes may include the following: handling orders; delivering products and services; processing for other purposes as required by our services; communicating with customers and users; updating our records and maintaining customer accounts. As a data controller, Ionic Security processes personal data related to: 1) website visitors for providing content and services via websites, email and other related channels for the communication of marketing and information about our services, 2) individual contacts of current, prospective and former corporate business partners, including enterprise customers, resellers, distributors and suppliers, for purposes of managing business relationships with business partners, including providing services, products, invoices and information, including marketing information. As a data processor, Ionic Security Inc. processes personal data that unaffiliated customers provide for processing under services agreements, subject to the direction and control of the customer, for example, data that users create while using Ionic.com systems that is used to control data flow and availability. Ionic Security Inc. also processes data as required by applicable law or to protect legal rights. Methods of processing The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of ionic.com (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time. What does this mean for the European User? The Owner is responsible for all processing of Personal Data it receives under the Privacy Shield Framework from European Union individuals and commits to subject the processed Personal Data to the Privacy Shield Principles. This, most importantly, includes the right of individuals to access their personal data processed by the Owner. The Owner also complies with the Privacy Shield Principles for all onward transfers of Personal Data from the EU, which means that it remains liable in cases of onward transfers to third parties. With respect to Personal Data received or transferred pursuant to the Privacy Shield Framework, the Owner is subject to the investigatory and regulatory enforcement powers of the FTC, if not stated otherwise in this privacy policy. The Owner is further required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Ionic Security: Inactive | Live pagesha256 c5013e1c90 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Scope
- Organizational data for customers, prospects, suppliers and affiliates in relation to commercial processes, sales, and compliance requirements (KYC processes / AML). Disclosed to 3rd parties where services are performed on behalf of the organization by the 3rd party.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Chain Asset Management Solutions: Inactive | Live pagesha256 4eba1b3324 |
ExpiredInactive
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Scope
- ProjectArmy provides managed WordPress hosting, email hosting, domain registrations, web development, and marketing services to its customers. To fulfill service obligations, ProjectArmy collects personal data to manage hosting and websites, offer domain registration services, provide web development and marketing services, and provide customer support. The types of personal data ProjectArmy collects include, but not limited to, full name, business name, contact information, address, billing information, and IP address. ProjectArmy uses Stripe and PayPal to securely collect credit card information, without ever seeing full credit card numbers. ProjectArmy may process additional personal information at a request of a customer and/or third-party partner as required to fulfill service obligations. The customer always remains in full control over their personal data. At its sole discretion, ProjectArmy may request a copy of an official form of identification (passport, driver's license, etc.) if it deems account and/or payment as fraudulent to verify customer's identity. Personal information may be shared with third-party sub-processors necessary to fulfill service obligations and related activities. ProjectArmy will only disclose minimum data necessary for the sub-processor to provide services and/or process said data on ProjectArmy's behalf. To protect personal data, only GDPR compliant sub-processors are used.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | ProjectArmy: Inactive | Live pagesha256 521b820928 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is AVOXI GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports15 evidence rows across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Developer tools category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Developer tools vendor has GDPR evidence in the index yet.
Understand GDPR evidence
All articlesExplainers
The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read