Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Blissbook
GDPR evidence
Blissbook is a culture-first online employee handbook and policy management platform for HR
No public evidenceBlissbook and GDPR
CertReports found no public GDPR evidence for Blissbook as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 30 Jun 2020
- Expires or valid through
- 21 Apr 2027
- Scope
- Rocket Whale Products, LLC ("Blissbook") is an online policy management platform used by employers to efficiently produce handbooks and policies for their employees. Blissbook therefore collects personal data on organizations, employers, those employers' employees, and visitors to Blissbook's website. Blissbook collects the following types of personal data on its customers (Organizations, Employees): Registration information when they register for an account; billing and communications information regarding payments; list of employees; and device and log information. Blissbook collects the following types of personal data on the users of its services, usually employees of Blissbook's customers: name, email address, which sections of the policies a user views, information about a user's access, viewing, or signing of a customer's handbook, and information about the user's device, such as type, IP address, operating system, etc. Blissbook collects the following types of personal data on the visitors to Blissbook's website: browsing data, cookies and other tracking technology information, contact information (if submitted by the visitor), log data, and any data related to help requests. Types of third parties to which Blissbook discloses customer and visitor personal data: service providers (hosting, website security, payment processors, IT services), advertising partners, law enforcement, purchasers in any acquisition or merger of the company), or with explicit consent. Types of third parties to which Blissbook discloses user personal data: service providers (hosting, website security, payment processors, IT services), law enforcement, and purchasers in any acquisition or merger of the company).
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Blissbook: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 98d241aa97 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Blissbook GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the HR and HRIS category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read