Skip to main content
CleanDNS logo

CleanDNS

GDPR evidence

cleandns.comLast verified 2 Nov 2026
Request the report Are you CleanDNS?
GDPR mark, CertReports state Vendor-stated as of 21 Sep 2026Vendor-stated

CleanDNS and GDPR

CleanDNS states it holds a data processing agreement. CertReports captured this on 21 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 21 Sep 2026 · confidence 90%
SourceCapturedQuoteLinks
CleanDNS trust centre (Vanta)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 02091e0858
CleanDNS trust centre (Vanta)
Vendor trust centre · HTTP 200
18 Sep 2026GDPR
Live page Snapshotsha256 509bed3356
This is wrong
VerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
14 Dec 2023
Expires or valid through
22 Jul 2027
Scope
CleanDNS is the provider of and anti-abuse service intended for DNS operators as well as other clients related to the field of Internet services such. as domain names, hosting services or law enforcement entities who work in this field. Our system ordinarily may process personal data in the provision of the core services. This data may ordinarily include, registrant data of reported domains, client data (subscriber data) relating to other online services for which we provide anti-abuse monitoring for, reporter information relating to reports of DNS abuse, business/client contacts (POCs and other business necessary details). Our system may also conclude certain commentary and details relating to the observed and evidenced use of domains that may be considered personal data. This data is held for the investigation and escalation of reported instances of abuse, with a view to remediation and disruption of such abuses. CleanDNS also has employees located within the EEA and UK, as such we will also process data relating to such employees, in the context of Human Resources actions. Disclosure of Data (as Controller) Where CleanDNS is acting as Controller, notwithstanding any legal or related obligations, we may disclose data in the context of carrying out the obligations of our various contracts: - In our role as employer to carry out any obligations, or provide any benefits as may be agreed under our contracts; - in the carrying out of any obligations with our contractors as per the terms of our contract agreements; or - Disclosure of CleanDNS Sinkhole data. As noted, CleanDNS does maintain a sinkhole infrastructure that collects data on web and DNS traffic relating to domains redirected to that sinkhole, as result of a connected assessed and actioned DNS Abuse (or other online harm as may be applicable). Although the vast majority of sinkhole data is considered to be non-PII, however, PII such as may be included in such webtraffic (e.g. IP addresses, cookie information) shall also be collected. For the avoidance of doubt, Sinkhole data (including PII were applicable) may disclosed to third parties (e.g. law enforcement, security researchers, academia, anti-abuse service providers or similar entities). This data shall however only be disclosed for the purpose of investigation, mitigation and disruption of online harms, or for other lawful purposes, consistent with applicable law. Disclosure of Data (as Processor) Where CleanDNS is acting as Processor, notwithstanding any legal or related obligations, we shall only disclose data as per the instructions of the Controller. General Disclosure We may also disclose Personal Information and/or non-personally-identifiable information if required to do so by law, or in the good faith belief that such action is necessary to comply with state and federal laws or respond to a court order, subpoena, or search warrant. CleanDNS reserves the right to disclose Personal Information and/or non-personally-identifiable information that CleanDNS believes, in good faith, is appropriate or necessary to take precautions against liability, to investigate and defend itself against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of our Website, and to protect the rights, property, or personal safety of CleanDNS, our users or others.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026CleanDNS: Active: EU-US Certification, UK Extension Certification, SW-US Certification
Live pagesha256 9d97822a38
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is CleanDNS GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  2. 18 Sep 2026Subprocessor added: AdobeAdobe appeared on the subprocessor list.
  3. 18 Sep 2026Subprocessor added: ConfluenceConfluence appeared on the subprocessor list.
  4. 18 Sep 2026Subprocessor added: FreshdeskFreshdesk appeared on the subprocessor list.
  5. 18 Sep 2026Subprocessor added: GitHubGitHub appeared on the subprocessor list.
  6. 18 Sep 2026Subprocessor added: Google Cloud PlatformGoogle Cloud Platform appeared on the subprocessor list.
  7. 18 Sep 2026Subprocessor added: Google DriveGoogle Drive appeared on the subprocessor list.
  8. 18 Sep 2026Subprocessor added: JiraJira appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: MongoDB AtlasMongoDB Atlas appeared on the subprocessor list.

Alternatives with GDPR evidence

Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.

No same-category vendor has GDPR evidence in the index yet.

Understand GDPR evidence

All articles