No public evidenceBentley Systems and GDPR
CertReports found no public GDPR evidence for Bentley Systems as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 2 Mar 2017
- Expires or valid through
- 30 Jun 2027
- Scope
- Account Data: Bentley processes personal data that it receives from its subsidiaries, users and accounts, website visitors, and business partners in the European Economic Area (EEA). The personal data is processed in order to (1) provide the products and services requested; (2) perform account support activities, such as fulfilling product orders, providing technical support, and improving product offerings; (3) perform sales and marketing activities as permissible under applicable law; and (4) conduct internal business processes such as financial processing and management, fraud detection and prevention, and compliance with law. When Bentley is providing online services to its users and accounts, Bentley may receive and process personal data as a data processor. As a data processor, Bentley acts on the instructions from its users and accounts or its EEA affiliates and does not control the personal data it processes. As a data processor, Bentley will only disclose personal data as instructed by our users and accounts or as required by applicable law. In some cases, and as permitted by our commercial agreements, we may disclose personal data with a subcontractor who is contracted to provide services on our behalf, in order to provide the online services to our users and accounts. Bentley’s processing of personal data in this context is usually limited to names, contact information (company, email, phone, physical business address), and any personal data stored by the subscriber in Bentley’s cloud environment. More information is available https://www.bentley.com/legal/privacy-policy/#collection. Candidate HR Data: Bentley processes candidate personal data to operate, manage and improve the recruitment system, communicate with the candidates, verify candidate's information, comply with legal obligations. . Bentley’s processing of personal data in this context includes name, contact information (e.g., address, email address, and phone number), professional and employment related information, education information, certain protected classifications of information (e.g., veterans’ status, disabilities, right to work, citizenship information etc.), and other information candidates voluntarily submit as part of an application (e.g., criminal records history, compensation history, family history, or personal situation). More information is available https://www.bentley.com/legal/candidate-privacy-statement/. Colleague HR Data: Bentley processes colleague personal data for managing work activities and personnel generally, including appraisals, promotions, and succession planning, administering salary and payments administration and reviews, wages and other awards, honouring other contractual benefits, loans, performing workforce analysis and planning, performing background checks, managing disciplinary matters and terminations, making business travel arrangement. Bentley’s processing of personal data in this context includes applicant information, identification, demographic, and contact information, benefits and beneficiary information, financial information, employment information, payroll information, talent development information, absence management information, employee monitoring information, other information necessary for employment.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Bentley Systems, Incorporated: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 e92a97fc72 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Bentley Systems GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Manufacturing and industrial category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Manufacturing and industrial vendor has GDPR evidence in the index yet.