How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
Bonterra
GDPR evidence
Social good software for nonprofits, corporations, public agencies, and
No public evidenceBonterra and GDPR
CertReports found no public GDPR evidence for Bonterra as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 26 Oct 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 30 Jun 2023
- Expires or valid through
- 30 Sep 2027
- Scope
- Bonterra LLC may collect personal data such as contact information, biographical information, and event information, as well as informatioin derived from cookies and other automated technologies, from its customers, users, and customers' end users, for purposes of supporting philanthropic programs offered by corporate and not-for- profit organizations.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 26 Oct 2026 | Bonterra LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 87188f3413 |
Data Privacy Framework list Official registry · HTTP 200 | 19 Oct 2026 | Bonterra, LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 31690bd4fd |
Data Privacy Framework list Official registry · HTTP 200 | 5 Oct 2026 | Bonterra, LLC: Inactive | Live pagesha256 2706e158f7 |
Data Privacy Framework list Official registry · HTTP 200 | 29 Sep 2026 | Bonterra, LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 c3a1dde90e |
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Bonterra, LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 faff1b74be |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Bonterra GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Nonprofit and fundraising category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Subsplash
Nonprofit and fundraising
The Subsplash Platform equips churches with the best mobile apps, church management software, websites, online giving, and more to engage
Submittable
Nonprofit and fundraising
The best way to launch, manage and measure social impact programs
Understand GDPR evidence
All articlesExplainers
The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read