No public evidenceBeyondTrust and GDPR
CertReports found no public GDPR evidence for BeyondTrust as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 28 Nov 2016
- Expires or valid through
- 13 Mar 2027
- Scope
- BeyondTrust collects and processes customer and business data to provide its Intelligent Identity & Privileged Access Security solutions enabling customers to easily support people, access and protect endpoints, defend privileged credentials in order to fight cyber threats and speed business performance, deliver superior support services and reduce threats to valuable data and systems. Such data may include (i) technical data such as browser type and version; (ii) usage data about how our products are being used; (iii) marketing and communications data such as marketing and communication choices; (iv) contact information such as name, address, email address, telephone number and job title; (v) identity data such as user ID or username; (vi) conversational data such as recordings and transcripts of telephone calls and email exchanges; and (vii) financial and transactional data such as product and service purchases and preferences and billing address. Data may be shared with third party service providers such as payment processors, providers of customer support and live-help services, email service providers, and shipping agents; and public authorities such as tax or law enforcement agencies when required by applicable law. We also collect data from existing and prospective customers, such as name, job title, email addresses, to send them information about our products, communicate about the services they have purchased, and other related services that may be of interest. We also analyze customer characteristics to better understand our customers and the market and improve our service and product offerings. We collect and process employee data of EU residents, such as name, address, contact details, date of birth, SSN, bank details and sickness records, for the purpose of administering and carrying out employment or personnel relationships. Employee data may be shared with third party service providers such as payroll processors, benefits and pension providers; and public authorities such as tax or law enforcement agencies when required by applicable law.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | BeyondTrust Corporation: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 0a734af373 |
- Kind
- listing
- Scope
- Employee Eligibility
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | BeyondTrust: Inactive | Live pagesha256 1a1e32cb58 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is BeyondTrust GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Identity and access category) whose GDPR row is verified or vendor-stated, ranked by similarity.
