Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Clicktale
GDPR evidence
The AI-powered Contentsquare platform unlocks insights to engage, convert, and retain with Experience and Product Analytics and Feedback
No public evidenceClicktale and GDPR
CertReports found no public GDPR evidence for Clicktale as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
Vendor-statedVendor states ISO 27701 on its trust centre
as of 21 Sep 2026 · confidence 80%VerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 18 Oct 2023
- Expires or valid through
- 15 Sep 2027
- Scope
- Contentsquare processes personal data in order to provide its contracted services to its customers, namely digital experience analytics, product analytics, voice-of-customer, and conversation intelligence services. The types of personal data processed by Contentsquare are: (i) Unique Identification Information (e.g., IP addresses (for website only), cookie ID, Unique User IDs and other similar unique identifiers); (ii) Website and mobile app technical information (e.g., pages of a website or app a visitor visited, visitor’s type of computer operating system, visitor’s type of web browser, JS error, other backend technical data, etc.); (iii) Behavioral Information (e.g., how a visitor has interacted with the website or app, mouse or touch movements, scrolls, mouse clicks, screen taps or zoom information; time of engagement, etc.); (iv) Personal data captured in customers' voice-of-customer surveys and interviews and user tests, including recordings and transcripts of the interviews and tests and their associated chats, notes, Q&A, polls, and survey information such as name and contact details; and (v) conversation data between customer service agents and requestors, such as agent name and email, performance data of the agent (e.g., efficiency metrics, sentiment analysis results, resolution time, etc), transcripts of conversations, conversation metadata (e.g., date, time, escalation transfer events), and where applicable, audio recordings.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Contentsquare: Active: UK Extension Certification, SW-US Certification, EU-US Certification | Live pagesha256 180b1902e3 |
Data Privacy Framework list Official registry · HTTP 200 | 29 Sep 2026 | Contentsquare: Inactive | Live pagesha256 7b3d8d2fc8 |
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 27 Apr 2018
- Scope
- Purpose of collection of personal data: to provide the contracted services which are web and app users experience analytics services to customers. Type of information collected: (i) IP address, (ii) technical information of a user’s computer or app, (iii) the pages within the specific website or app (including the preceding website/app's URL), (iv) how a user has interacted with the website or app, the time engaged on a certain web page or app page, (v) any errors encountered by the user on the web page or app, (vi) information provided by a user on the website or app (except any information the website/app operator chooses to block from being sent to Clicktale), (vii) the HTML of the webpage or screenshot of the app screen visited by a user (including any data or content contained therein) and (viii) a cookie to anonymously identify a user by generating a unique ID for the purpose of enabling the Clicktale software to track such users’s actions across the customer’s website. Third party involved: Data hosting providers.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | Clicktale, Inc.: Inactive | Live pagesha256 a8a4f3d2d9 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Clicktale GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Analytics category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Mouseflow
Analytics
Improve UX and conversions with website behavior analytics! Use session replay, heatmaps, and feedback to improve website user
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
Amplitude
Analytics
Digital Analytics Platform
Mixpanel
Analytics
Mixpanel is event analytics for builders that need answers.
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Nuix
Analytics
Nuix Ltd is an Australian technology company that produces investigative analytics and intelligence software for extracting knowledge from
Inbox Monster
Analytics
Boost email & SMS performance with Inbox Monster's creative rendering, deliverability and analytics tools for marketers who want
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read